Flash Slideshow Maker Professional 5.20 contains a buffer overflow in the registration dialog’s Name and Code fields. The flaw permits a local attacker to inject crafted data that triggers a structured exception handling exploit, resulting in execution of arbitrary code. Attackers can employ this to launch a reverse shell and gain system‑level privileges on the victim machine.

The vulnerability affects SocuSoft Flash Slideshow Maker Professional version 5.20. No other versions or related products are identified as impacted in the CNA data.

The CVSS score of 8.6 indicates a high severity level for local code execution. With no EPSS data available and the vulnerability not listed in CISA KEV, the likelihood of exploitation in the wild is uncertain, yet the attack requires local access. If an attacker can gain write access to the registry dialog or supply malicious input, they can achieve full system compromise.