Allok Fast AVI MPEG Splitter 1.2 contains a stack‑based buffer overflow that can be triggered by a local attacker supplying a crafted license name string. The overflow is triggered with 780 bytes of filler followed by shellcode, allowing execution of arbitrary code with the application's privileges. If successfully exploited, the attacker can gain complete control of the affected process and potentially compromise system security.

Alloksoft’s Fast AVI MPEG Splitter version 1.2 is affected. No other vendor or version information is provided.

The CVSS score of 8.6 indicates high severity for confidentiality, integrity and availability. The EPSS score is not available, so exact exploitation probability cannot be quantified but the vulnerability is likely to be exploitable on systems where the application runs with elevated privileges. It is not listed in the CISA KEV catalog. The vulnerability is local in nature; an attacker must be able to execute the application or otherwise supply a malicious license name. Based on the description, it is inferred that the attack vector is local user input.