Technical impact
The vulnerability is a classic buffer overflow exploitable through the License Name input field in Alloksoft Video Joiner 4.6.1217. An attacker with local access can supply a malicious string that overflows the buffer, triggers a structured exception handler overwrite, and injects shellcode. Successful exploitation allows the attacker to execute arbitrary code under the privileges of the running process, potentially giving them full control of the affected machine.
Affected Systems
Alloksoft Video Joiner version 4.6.1217 is affected. This is the sole product listed by the CNA, and no other versions are explicitly mentioned as vulnerable in the available information.
Risk and Exploitability
The CVSS score of 8.6 indicates a high severity exploit that is not currently tracked in CISA’s KEV catalog, and no EPSS value is provided. The attack is local, meaning an attacker must have prior local access to supply the malicious license name. Because the vulnerability requires interaction with the application and no automated remote exploitation is documented, the likelihood of exploitation in the wild is limited, but neutralized by the high impact of local code execution if an attacker does gain control. Administrators should treat this as a significant risk until remedied.
