A local buffer overflow vulnerability in Allok AVI to DVD SVCD VCD Converter 4.0.1217 allows an attacker to achieve arbitrary code execution on the host system.

This is a classic buffer overflow (CWE-120) triggered by a structured exception handling (SEH) mechanism. The vulnerability exists within the License Name field, where a local, unauthenticated attacker can supply a crafted string to overwrite the SEH chain and hijack the execution flow.

Successful exploitation of this vulnerability allows a local user to execute arbitrary code with the privileges of the application. This can lead to full system compromise, unauthorized data access, or the installation of persistent malicious software. Given the CVSS score of 7.8, this represents a high-severity risk to local system integrity and confidentiality.

Immediate Action: Discontinue the use of this software version immediately, as there is no indication of a vendor patch. If the software is required, restrict access to the host machine to authorized personnel only to prevent local exploitation.

Proactive Monitoring: Monitor system logs for unusual application crashes or unexpected child processes spawned by the converter application. Review endpoint detection logs for signs of shellcode execution or memory corruption patterns.

Compensating Controls: Ensure that the host operating system is fully patched and that modern exploit mitigation features, such as Data Execution Prevention (DEP) and Address Space Layout Randomization (ASLR), are enabled and strictly enforced for the application.

Public Exploit Available: Yes, a public exploit exists, as documented in the Exploit Database (EDB-ID: 44549).

Due to the availability of a functional exploit and the nature of the buffer overflow, this vulnerability poses a significant risk to any environment where this specific version of the software is installed. We strongly recommend removing the vulnerable application from all systems. If removal is not feasible, restrict local access to the affected hardware and employ strict monitoring to detect potential exploitation attempts.