CVE-2020-37196

40th percentile - higher than 40% of all known CVEs

Dnss Domain Name Search Software contains a denial of service vulnerability that allows attackers to crash the application by providing an oversized registration key. Attackers can generate a 1000-character buffer payload and paste it into the registration key field to trigger an application crash.

The risk is that an attacker can remotely or locally crash the application, leading to disruption of the domain name search service. This can impact the operations of an organization relying on this software.

It is recommended to immediately update Dnss Domain Name Search Software to the latest version that includes a fix for this vulnerability. Also, limit the input length in the registration key field.