CVE-2020-37010: BearShare Lite 5.2.5 - 'Advanced Search'Buffer Overflow in (PoC)
BearShare Lite 5.2.5 contains a buffer overflow vulnerability in the Advanced Search keywords input that allows attackers to execute arbitrary code. Attackers can craft a specially designed payload to overwrite the EIP register and execute shellcode by pasting malicious content into the search keywords field.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2020-37010?
CVE-2020-37010 has a high severity due to its ability to allow arbitrary code execution through a buffer overflow.
How do I fix CVE-2020-37010?
To fix CVE-2020-37010, update to a version of BearShare Lite that addresses the buffer overflow vulnerability.
What software is affected by CVE-2020-37010?
CVE-2020-37010 affects BearShare Lite version 5.2.5.
What type of vulnerability is CVE-2020-37010?
CVE-2020-37010 is classified as a buffer overflow vulnerability in the Advanced Search feature.
Can CVE-2020-37010 be exploited remotely?
Yes, CVE-2020-37010 can be exploited remotely by an attacker sending crafted input to the Advanced Search function.