CVE-2018-25294

HIGH 7.5

CEWE Photoshow 6.3.4 Buffer Overflow Denial of Service

CVSS Score

7.5

EPSS Score

0.0%

EPSS Percentile

0th

CEWE Photoshow 6.3.4 contains a buffer overflow vulnerability in the login dialog that allows attackers to crash the application by submitting oversized input. Attackers can inject 4000 bytes of data into the email address and password fields to trigger a denial of service condition.

CWE	CWE-120
Vendor	cewe-photoworld
Product	cewe photoshow
Published	Apr 26, 2026

Stay Ahead of the Next One

Get instant alerts for cewe-photoworld cewe photoshow

Be the first to know when new high vulnerabilities affecting cewe-photoworld cewe photoshow are published — delivered to Slack, Telegram or Discord.

Get Free Alerts → Free · No credit card · 60 sec setup

CVSS v3 Breakdown

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Attack Vector

Network

Attack Complexity

Low

Privileges Required

None

User Interaction

None

Scope

Unchanged

Confidentiality

None

Integrity

None

Availability

High

Affected Versions

Cewe-Photoworld / CEWE Photoshow

6.3.4

References

NVD ↗ CVE.org ↗ EPSS Data ↗

exploit-db.com: https://www.exploit-db.com/exploits/45211 cewe-photoworld.com: https://cewe-photoworld.com/ cewe-photoworld.com: https://cewe-photoworld.com/creator-software/windows-download vulncheck.com: https://www.vulncheck.com/advisories/cewe-photoshow-buffer-overflow-denial-of-service

Credits

Gionathan "John" Reale