A buffer overflow exists in the registration dialog of SocuSoft 3GP Photo Slideshow 8.05, allowing an attacker who can provide crafted input to the Registration Name and Registration Key fields to overwrite the structured exception handling chain and execute arbitrary code. The vulnerability is a classic stack corruption flaw (CWE‑120) and can be exploited locally to gain complete control of the system, including reverse shell access.

The affected product is SocuSoft 3GP Photo Slideshow, version 8.05. No other versions are listed as impacted in the available data.

The CVSS score of 8.6 indicates high severity. The EPSS score is unavailable, and the vulnerability is not listed in CISA’s KEV catalog, suggesting it has not yet been widely observed in the wild. Because the exploit requires local interaction with the registration dialog, the risk to a machine is mitigated if the application is run only by trusted users or is disabled. Nonetheless, if the software is installed and the registration feature is available, an attacker with local access could execute arbitrary commands with the privileges of the user running the program.