Skip to content
CVE PROGRAM SOURCE RECORD8.4 High

CVE-2020-37040

Code Blocks 17.12 - 'File Name' Local Buffer Overflow

Description

Code Blocks 17.12 contains a local buffer overflow vulnerability that allows attackers to execute arbitrary code by crafting a malicious file name with Unicode characters. Attackers can trigger the vulnerability by pasting a specially crafted payload into the file name field during project creation, potentially executing system commands like calc.exe.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Code::Blocks Code::Blocks

  • 17.12affected

References