CVE-2018-25294
Buffer Overflow in CEWE Photoshow 6.3.4 Causes DoS Crash
Publication date: 2026-04-26
Last updated on: 2026-04-26
Assigner: VulnCheck
Description
Description
CVSS Scores
EPSS Scores
| Probability: | |
| Percentile: |
Meta Information
Affected Vendors & Products
| Vendor | Product | Version / Range |
|---|---|---|
| cewe | photoshow | 6.3.4 |
Helpful Resources
Exploitability
| CWE ID | Description |
|---|---|
| CWE-120 | The product copies an input buffer to an output buffer without verifying that the size of the input buffer is less than the size of the output buffer. |
Attack-Flow Graph
AI Powered Q&A
How can this vulnerability impact me? :
This vulnerability can impact you by allowing an attacker to crash the CEWE Photoshow application through a denial of service attack.
Since the vulnerability does not affect confidentiality or integrity, the main impact is availability, meaning the application can be made unavailable to legitimate users.
Can you explain this vulnerability to me?
CVE-2018-25294 is a buffer overflow vulnerability found in CEWE Photoshow version 6.3.4. It occurs in the login dialog where attackers can submit oversized input, specifically by injecting 4000 bytes of data into the email address and password fields.
This overflow allows attackers to crash the application, causing a denial of service condition.