Skip to content
CVE PROGRAM SOURCE RECORD8.6 High

CVE-2020-37031

Simple Startup Manager 1.17 - 'File' Local Buffer Overflow

Description

Simple Startup Manager 1.17 contains a local buffer overflow vulnerability that allows attackers to execute arbitrary code by overwriting memory through the 'File' input parameter. Attackers can craft a malicious payload with 268 bytes to trigger code execution, bypassing DEP and overwriting memory addresses to launch calc.exe.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Ashkon Software Simple Startup Manager

  • 1.17affected

References