Skip to content
CVE PROGRAM SOURCE RECORD8.4 High

CVE-2020-37000

Free MP3 CD Ripper 2.8 - Stack Buffer Overflow (SEH + Egghunter)

Description

Free MP3 CD Ripper 2.8 contains a stack buffer overflow vulnerability that allows remote attackers to execute arbitrary code by crafting a malicious WAV file with oversized payload. Attackers can leverage a specially crafted exploit file with shellcode, SEH bypass, and egghunter technique to achieve remote code execution on vulnerable Windows systems.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Cleanersoft Software Free MP3 CD Ripper

  • 2.8 Build 20140611affected

References