CVE-2020-37197
HighCVSS 7.5Exploitation Probability (EPSS)
Low risk40th percentile - higher than 40% of all known CVEs
Summary
Dnss Domain Name Search Software contains a denial of service vulnerability that allows attackers to crash the application by overflowing the 'Name' input field. Attackers can generate a 1000-character buffer payload and paste it into the registration name field to trigger an application crash.
Risk Assessment
The risk is that an attacker can remotely crash the application, leading to service disruption and potential loss of availability for users.
Recommendation
It is recommended to immediately update Dnss Domain Name Search Software to the latest version that includes a fix for this vulnerability. Also, implement input length validation for the 'Name' field.
Other vulnerabilities in Dnss Domain Name Search Software
Original NVD description (English source)
Dnss Domain Name Search Software contains a denial of service vulnerability that allows attackers to crash the application by overflowing the 'Name' input field. Attackers can generate a 1000-character buffer payload and paste it into the registration name field to trigger an application crash.