CVE-2020-37200
HighCVSS 7.5Exploitation Probability (EPSS)
Low risk33th percentile - higher than 33% of all known CVEs
Summary
NetShareWatcher 1.5.8.0 contains a buffer overflow vulnerability in the registration key input that allows attackers to crash the application by supplying oversized input. Attackers can generate a 1000-character payload and paste it into the registration key field to trigger an application crash.
Risk Assessment
The risk is that an attacker can intentionally crash the application, leading to service disruption and potential use in denial-of-service attacks.
Recommendation
It is recommended to immediately update NetShareWatcher to the latest version that fixes this vulnerability and restrict application access to trusted users only.
Other vulnerabilities in NetShareWatcher
See all- CVE-2019-25733High
NetShareWatcher 1.5.8.0 has a structured exception handler buffer overflow vulnerability allowing local attackers to execute arbitrary code by supplying malicious input. Attackers can craft a payload with overwritten SEH and NSEH pointers through the Restrictions custom filter field to trigger code execution when the Find function is invoked.
- CVE-2020-37201High
NetShareWatcher 1.5.8.0 contains a buffer overflow vulnerability in the registration name input that allows attackers to crash the application. Attackers can generate a 1000-character payload and paste it into the 'Name' field to trigger an application crash.
Original NVD description (English source)
NetShareWatcher 1.5.8.0 contains a buffer overflow vulnerability in the registration key input that allows attackers to crash the application by supplying oversized input. Attackers can generate a 1000-character payload and paste it into the registration key field to trigger an application crash.