CEWE Photoshow 6.3.4 contains a buffer overflow vulnerability in the login dialog that allows attackers to crash the application by submitting oversized input. …

CVE-2018-25294 is a buffer overflow vulnerability in CEWE Photoshow version 6.3.4 that affects the login dialog component. Attackers can exploit this vulnerability by injecting oversized input of up to 4000 bytes into the email address and password fields. This causes the application to crash, resulting in a denial of service condition. The vulnerability allows remote attackers to disrupt service availability through crafted input that exceeds buffer boundaries. The flaw demonstrates poor input validation and memory management in the application's authentication mechanism.