Skip to content
CVE PROGRAM SOURCE RECORD8.4 High

CVE-2020-37066

GoldWave 5.70 – Buffer Overflow (SEH Unicode)

Description

GoldWave 5.70 contains a buffer overflow vulnerability that allows attackers to execute arbitrary code by crafting malicious input in the File Open URL dialog. Attackers can generate a specially crafted text file with Unicode-encoded shellcode to trigger a stack-based overflow and execute commands when the file is opened.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

GoldWave GoldWave

  • 5.70affected

References