A critical buffer overflow vulnerability in Alloksoft Video Joiner 4.6.1217 allows a local attacker to execute arbitrary code via a crafted license registration string.

The application fails to perform adequate boundary checks on the License Name input field. This vulnerability allows an unauthenticated local attacker to trigger a stack-based buffer overflow by providing a specially crafted string containing a structured exception handler overwrite and malicious shellcode.

Successful exploitation of this vulnerability allows an attacker to gain full control over the application process with the privileges of the currently logged-in user. Because the flaw enables arbitrary code execution, it poses a severe risk of data exfiltration, installation of persistent malware, or further lateral movement within the host environment. The high CVSS score of 8.4 reflects the potential for total compromise of the affected system.

Immediate Action: Discontinue the use of Alloksoft Video Joiner version 4.6.1217 immediately, as no vendor-provided security patch is available to resolve this vulnerability.

Proactive Monitoring: Review endpoint security logs for unexpected process execution or abnormal termination of the application, which may indicate exploitation attempts.

Compensating Controls: Restrict access to the application to only necessary users and ensure that the application runs with the least privilege possible to contain potential impact.

Public Exploit Available: Yes, a functional proof-of-concept exploit is available via Exploit-DB (EDB-ID 44364).

Given the availability of public exploit code and the critical nature of the vulnerability, the risk of exploitation is high for environments where this software remains in use. Organizations are strongly advised to remove the affected software from all systems, as the lack of a vendor patch makes effective remediation impossible. If the software is strictly required for business operations, it must be isolated from critical networks and monitored heavily for unauthorized activity.