SocuSoft DVD Photo Slideshow Professional 8.07 contains a stack-based buffer overflow in the registration name field that permits local attackers to execute arbitrary code by overwriting the structured exception handling chain. The flaw is a classic example of CWE-121, where unbounded input data can corrupt the stack and redirect execution flow to attacker supplied shellcode. A malicious user crafts a text file with junk bytes, an SEH overwrite sequence, and shellcode, then pastes it into the Registration Name field through the Help > Register menu, triggering the chain overwrite and code execution on the local machine.

Only SocuSoft DVD Photo Slideshow Professional version 8.07 is affected; no other versions or vendors are listed in the CNA data.

The CVSS score of 8.6 indicates high severity, but the vulnerability is local in nature and requires the attacker to be able to run the application or have a legitimate user paste the crafted input. EPSS data is not available and the vulnerability is not listed in the CISA KEV catalog, which suggests a lower likelihood of widespread exploitation at present. However, institutions that rely on this software should consider that a local attacker or a malicious user with some level of privilege could compromise the system by triggering the buffer overflow and gaining arbitrary code execution.