CVE-2020-37010

Summary

BearShare Lite 5.2.5 contains a buffer overflow vulnerability in the Advanced Search keywords input that allows attackers to execute arbitrary code. Attackers can craft a specially designed payload to overwrite the EIP register and execute shellcode by pasting malicious content into the search keywords field.

Affected Software

Weaknesses

• CWE-120: Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

ADP Enrichment

CISA ADP Vulnrichment

• SSVC:
• Exploitation: poc
  • Automatable: no
  • Technical Impact: total

Additional References

• https://www.exploit-db.com/exploits/48839

References

• https://www.exploit-db.com/exploits/48839
• http://www.bearshareofficial.com/
• http://www.oldversion.com.de/windows/bearshare-lite-5-2-5
• https://www.vulncheck.com/advisories/bearshare-lite-advanced-searchbuffer-overflow-in-poc

• ←Previous
• Next→