endpoint-software-vulnerabilityproof-of-concept-releaseprivilege-escalation-technique

SEH Buffer Overflows in Allok Media Converters Enable Local Code Execution

Vulnerability Disclosure · 3 sources · Updated 4mo ago · First seen Apr 29, 2026

Three AllokSoft multimedia applications were assigned CVEs for buffer overflow flaws in their License Name registration field that can lead to arbitrary code execution. The affected products are Allok soft WMV to AVI MPEG DVD WMV Converter 4.6.1217 (CVE-2018-25314), Allok AVI to DVD SVCD VCD Converter 4.0.1217 (CVE-2018-25302), and Allok Video to DVD Burner 2.6.1217 (CVE-2018-25303). The vulnerabilities were classified under CWE-120 and CWE-121, with CVSS v3.1 and v4.0 vectors added to the records.

The published descriptions say a local attacker can trigger the flaws by supplying an oversized string in the registration dialog, causing a structured exception handler (SEH) overwrite and execution of embedded shellcode with the application's privileges. One advisory describes exploitation after clicking the Register button, while another notes a payload with junk data, SEH chain pointers, and shellcode pasted into the field. References attached to the CVE records include Exploit-DB, AllokSoft, and VulnCheck advisories, indicating publicly documented exploit details for the affected legacy software.

Do you run this?See affected versions and whether adversaries are exploiting it.

Check your exposure

Event timeline

How this story unfolded

Events from the most recent confirmed update back to the earliest known activity.

3 events · Apr 29, 2026

Apr 29, 20266mo ago
Allok WMV to AVI MPEG DVD WMV Converter overflow documented as CVE-2018-25314
A CVE record was received describing a local buffer overflow in the License Name field of Allok soft WMV to AVI MPEG DVD WMV Converter 4.6.1217. According to the entry, an oversized string can trigger an SEH overwrite and enable arbitrary code execution with the application's privileges.
Apr 29, 20266mo ago
Allok Video to DVD Burner overflow documented as CVE-2018-25303
A CVE entry was received for a stack-based buffer overflow in the License Name field of Allok Video to DVD Burner 2.6.1217. The description states that a crafted input can overwrite the SEH chain and execute attacker-supplied shellcode locally.
Apr 29, 20266mo ago
Allok AVI to DVD SVCD VCD Converter SEH overflow documented as CVE-2018-25302
A CVE record was received documenting a local buffer overflow in the License Name field of Allok AVI to DVD SVCD VCD Converter 4.0.1217. The flaw can be exploited via an SEH overwrite to achieve arbitrary code execution when the Register button is clicked.

Linked entities

Related entities

Vulnerabilities, threat actors, malware, products, organizations, and breaches Mallory has linked to this story.

Open in app →

Vulnerabilities

3 linked

SEH-based buffer overflow in Allok AVI to DVD SVCD VCD Converter 4.0.1217 License Name field (CVE-2018-25302)SEH-based stack buffer overflow in Allok Video to DVD Burner 2.6.1217 License Name field (CVE-2018-25303)Buffer Overflow in Allok soft WMV to AVI MPEG DVD WMV Converter 4.6.1217 License Name Field (CVE-2018-25314)

Affected products

1 linked

Wmv To Avi Mpeg Dvd Wmv Converter

Organizations

1 linked

Allok Soft

Do you run this?See whether adversaries are exploiting this yet, and where the affected versions run in your environment.

Check Your Exposure

Source coverage

Sources

3 references tracked. Mallory keeps watching after this page renders.

Cvefeed High SeverityAdvisories · Apr 29, 2026

CVE-2018-25314 - Allok soft WMV to AVI MPEG DVD WMV Converter 4.6.1217 Buffer OverflowOpen source ↗

Cvefeed High SeverityAdvisories · Apr 29, 2026

CVE-2018-25302 - Allok AVI to DVD SVCD VCD Converter 4.0.1217 Buffer Overflow SEHOpen source ↗

Cvefeed High SeverityAdvisories · Apr 29, 2026

CVE-2018-25303 - Allok Video to DVD Burner 2.6.1217 Buffer Overflow SEHOpen source ↗

Mallory platform

See the full picture, correlated to your attack surface.

This page covers what’s public. Mallory adds the parts that aren’t: which of your assets are affected, which threat actors are using it right now, and what to deploy next.

Start Free Trial Open in App

Exposure mappingMap indicators from this story to your assets and identify affected systems in minutes.

Threat actor evidenceEvery observed campaign, victim, and pivot linked to actors named in this story.

Associated malwareMalware, exploits, and IOCs connected to the activity described here.

Detection signaturesYARA, Sigma, and Snort rules deployed to your SIEM as soon as they’re published.

Scheduled alertsGet matching new stories delivered to your team as they break, not the next morning.

AI threadsAsk questions about this story and take action on the answers.

← Back to News

endpoint-software-vulnerabilityproof-of-concept-releaseprivilege-escalation-technique

SEH Buffer Overflows in Allok Media Converters Enable Local Code Execution

Vulnerability Disclosure · 3 sources · Updated 4mo ago · First seen Apr 29, 2026

Do you run this?See affected versions and whether adversaries are exploiting it.

Check your exposure

Event timeline

How this story unfolded

Events from the most recent confirmed update back to the earliest known activity.

3 events · Apr 29, 2026

Apr 29, 20266mo ago
Allok WMV to AVI MPEG DVD WMV Converter overflow documented as CVE-2018-25314
A CVE record was received describing a local buffer overflow in the License Name field of Allok soft WMV to AVI MPEG DVD WMV Converter 4.6.1217. According to the entry, an oversized string can trigger an SEH overwrite and enable arbitrary code execution with the application's privileges.
Apr 29, 20266mo ago
Allok Video to DVD Burner overflow documented as CVE-2018-25303
A CVE entry was received for a stack-based buffer overflow in the License Name field of Allok Video to DVD Burner 2.6.1217. The description states that a crafted input can overwrite the SEH chain and execute attacker-supplied shellcode locally.
Apr 29, 20266mo ago
Allok AVI to DVD SVCD VCD Converter SEH overflow documented as CVE-2018-25302
A CVE record was received documenting a local buffer overflow in the License Name field of Allok AVI to DVD SVCD VCD Converter 4.0.1217. The flaw can be exploited via an SEH overwrite to achieve arbitrary code execution when the Register button is clicked.

Linked entities