{"id":"CVE-2020-37013","state":"PUBLISHED","title":"Audio Playback Recorder 3.2.2 - Local Buffer Overflow (SEH)","description":"Audio Playback Recorder 3.2.2 contains a local buffer overflow vulnerability in the eject and registration parameters that allows attackers to execute arbitrary code. Attackers can craft malicious payloads and overwrite Structured Exception Handler (SEH) to execute shellcode when pasting specially crafted input into the application's input fields.","publishedAt":"2026-01-29T14:28:31.891Z","updatedAt":"2026-05-12T20:46:26.754Z","severity":{"score":8.4,"label":"High","version":"4.0","vector":"CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N","source":"VulnCheck"},"assigner":"VulnCheck","products":["Tucows Inc. Audio Playback Recorder"],"affected":[{"vendor":"Tucows Inc.","product":"Audio Playback Recorder","versions":[{"version":"3.2.2","status":"affected"}]}],"references":["https://www.exploit-db.com/exploits/48796","https://web.archive.org/web/20210105222148/https://whitecr0wz.github.io/assets/img/Findings11/11-proof.gif","https://archive.org/details/tucows_288670_Audio_Playback_Recorder","https://www.vulncheck.com/advisories/audio-playback-recorder-local-buffer-overflow-seh"],"weaknesses":["CWE-121"],"ingestedAt":"2026-10-29T19:47:27.394Z","source":{"repository":"CVEProject/cvelistV5","path":"cves/2020/37xxx/CVE-2020-37013.json","commit":"556c9d3a8cd17e218bb8e452ba7cd619a384ff47"},"raw":{"dataType":"CVE_RECORD","dataVersion":"5.2","cveMetadata":{"cveId":"CVE-2020-37013","state":"PUBLISHED","datePublished":"2026-01-29T14:28:31.891Z","dateUpdated":"2026-05-12T20:46:26.754Z","assignerShortName":"VulnCheck","assignerOrgId":"83251b91-4cc7-4094-a5c7-464a1b83ea10","dateReserved":"2026-01-28T18:18:30.521Z"},"containers":{"cna":{"title":"Audio Playback Recorder 3.2.2 - Local Buffer Overflow (SEH)","descriptions":[{"lang":"en","value":"Audio Playback Recorder 3.2.2 contains a local buffer overflow vulnerability in the eject and registration parameters that allows attackers to execute arbitrary code. Attackers can craft malicious payloads and overwrite Structured Exception Handler (SEH) to execute shellcode when pasting specially crafted input into the application's input fields."}],"affected":[{"vendor":"Tucows Inc.","product":"Audio Playback Recorder","versions":[{"version":"3.2.2","status":"affected"}]}],"references":[{"url":"https://www.exploit-db.com/exploits/48796","name":"ExploitDB-48796","tags":["exploit"]},{"url":"https://web.archive.org/web/20210105222148/https://whitecr0wz.github.io/assets/img/Findings11/11-proof.gif","name":"Archived Researcher Proof of Concept Video","tags":["exploit"]},{"url":"https://archive.org/details/tucows_288670_Audio_Playback_Recorder","name":"Product Software Archive","tags":["product"]},{"url":"https://www.vulncheck.com/advisories/audio-playback-recorder-local-buffer-overflow-seh","name":"VulnCheck Advisory: Audio Playback Recorder 3.2.2 - Local Buffer Overflow (SEH)","tags":["third-party-advisory"]}],"metrics":[{"cvssV4_0":{"Automatable":"NOT_DEFINED","Recovery":"NOT_DEFINED","Safety":"NOT_DEFINED","attackComplexity":"LOW","attackRequirements":"NONE","attackVector":"LOCAL","baseScore":8.4,"baseSeverity":"HIGH","exploitMaturity":"NOT_DEFINED","privilegesRequired":"NONE","providerUrgency":"NOT_DEFINED","subAvailabilityImpact":"NONE","subConfidentialityImpact":"NONE","subIntegrityImpact":"NONE","userInteraction":"ACTIVE","valueDensity":"NOT_DEFINED","vectorString":"CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N","version":"4.0","vulnAvailabilityImpact":"HIGH","vulnConfidentialityImpact":"HIGH","vulnIntegrityImpact":"HIGH","vulnerabilityResponseEffort":"NOT_DEFINED"},"format":"CVSS"},{"cvssV3_1":{"attackComplexity":"LOW","attackVector":"LOCAL","availabilityImpact":"HIGH","baseScore":8.4,"baseSeverity":"HIGH","confidentialityImpact":"HIGH","integrityImpact":"HIGH","privilegesRequired":"NONE","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","version":"3.1"},"format":"CVSS"}],"problemTypes":[{"descriptions":[{"cweId":"CWE-121","lang":"en","description":"Stack-based Buffer Overflow","type":"CWE"}]}],"providerMetadata":{"shortName":"VulnCheck","orgId":"83251b91-4cc7-4094-a5c7-464a1b83ea10","dateUpdated":"2026-05-12T20:46:26.754Z"},"datePublic":"2020-09-08T00:00:00.000Z","credits":[{"lang":"en","value":"Felipe Winsnes","type":"finder"}],"x_generator":{"engine":"vulncheck"}},"adp":[{"title":"CISA ADP Vulnrichment","references":[{"url":"https://www.exploit-db.com/exploits/48796","tags":["exploit"]}],"metrics":[{"other":{"type":"ssvc","content":{"timestamp":"2026-01-29T15:49:22.783188Z","id":"CVE-2020-37013","options":[{"Exploitation":"poc"},{"Automatable":"no"},{"Technical Impact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}}],"providerMetadata":{"shortName":"CISA-ADP","orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","dateUpdated":"2026-01-29T16:48:09.267Z"}}]}}}