CVE-2011-5171: CyberLink Power2Go project file stack buffer overflow

Automated analysis

Generated by VULONE's analysis model from the NVD record, CISA KEV and EPSS data on 20 September 2026. Confidence: medium.

high priorityRemote code execution with a public exploit and very high EPSS, but exploitation depends on user opening a crafted project file and no active KEV or ransomware use is recorded.

What it is

CyberLink Power2Go 7 (build 196) and 8 (build 1031) contain multiple stack-based buffer overflows in the handling of the src and name parameters within a p2g project file. Opening a crafted project file can corrupt the stack and allow arbitrary code execution in the context of the application. The flaw matters because project files are routinely exchanged between users, giving a document-style delivery path into a desktop application.

Impact

An attacker who gets a victim to open a malicious p2g file can execute arbitrary code with the privileges of the Power2Go process, leading to full compromise of the user's session. The CVSS 2.0 vector rates confidentiality, integrity and availability impact as complete.

Attack surface

The vector is network-reachable with medium complexity and no authentication (AV:N/AC:M/Au:N), but exploitation requires the victim to open a crafted p2g project file, so user interaction is effectively required. The vulnerable input is the src and name parameters parsed from that file.

Exploitation

A public exploit exists (Exploit-DB 18220) and EPSS is 0.45786 (98.7th percentile), indicating elevated likelihood, but the CVE is not listed in CISA KEV and no ransomware use is documented.

What to do

• Upgrade Power2Go to a version later than 7 build 196 and 8 build 1031, or remove the product if it is no longer needed.
• Block or quarantine p2g project files arriving by email or download until the application is patched.
• Open untrusted project files only in a sandboxed or low-privilege environment.
• Apply exploit mitigation settings (DEP, ASLR) and endpoint protection to the host running Power2Go.

Detection

• Monitor for Power2Go process crashes or abnormal child processes spawned from the application.
• Alert on p2g files written to disk or opened from email attachments and download directories.
• Search endpoint telemetry for Power2Go loading unusual modules or making network connections after opening a project file.

This assessment is produced automatically and is not human-reviewed. Verify against the vendor advisory before acting on it.