{"id":"CVE-2020-37188","state":"PUBLISHED","title":"SpotOutlook 1.2.6 - 'Name' Denial of Service","description":"SpotOutlook 1.2.6 contains a denial of service vulnerability in the registration name input field that allows attackers to crash the application. Attackers can overwrite the buffer by pasting 1000 'A' characters into the 'Name' field, causing the application to become unresponsive.","publishedAt":"2026-02-11T20:37:10.344Z","updatedAt":"2026-02-12T16:29:41.406Z","severity":{"score":4.6,"label":"Medium","version":"4.0","vector":"CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:A/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N","source":"VulnCheck"},"assigner":"VulnCheck","products":["Nsasoft Nsauditor SpotOutlook"],"affected":[{"vendor":"Nsasoft","product":"Nsauditor SpotOutlook","versions":[{"version":"1.2.6","status":"affected"}]}],"references":["https://www.exploit-db.com/exploits/47906","http://www.nsauditor.com/","https://www.vulncheck.com/advisories/spotoutlook-name-denial-of-service"],"weaknesses":["CWE-120"],"ingestedAt":"2026-10-29T19:47:27.394Z","source":{"repository":"CVEProject/cvelistV5","path":"cves/2020/37xxx/CVE-2020-37188.json","commit":"556c9d3a8cd17e218bb8e452ba7cd619a384ff47"},"raw":{"dataType":"CVE_RECORD","dataVersion":"5.2","cveMetadata":{"cveId":"CVE-2020-37188","state":"PUBLISHED","datePublished":"2026-02-11T20:37:10.344Z","dateUpdated":"2026-02-12T16:29:41.406Z","assignerShortName":"VulnCheck","assignerOrgId":"83251b91-4cc7-4094-a5c7-464a1b83ea10","dateReserved":"2026-02-10T18:42:03.311Z"},"containers":{"cna":{"title":"SpotOutlook 1.2.6 - 'Name' Denial of Service","descriptions":[{"lang":"en","value":"SpotOutlook 1.2.6 contains a denial of service vulnerability in the registration name input field that allows attackers to crash the application. Attackers can overwrite the buffer by pasting 1000 'A' characters into the 'Name' field, causing the application to become unresponsive."}],"affected":[{"vendor":"Nsasoft","product":"Nsauditor SpotOutlook","versions":[{"version":"1.2.6","status":"affected"}]}],"references":[{"url":"https://www.exploit-db.com/exploits/47906","name":"ExploitDB-47906","tags":["exploit"]},{"url":"http://www.nsauditor.com/","name":"Vendor Homepage","tags":["product"]},{"url":"https://www.vulncheck.com/advisories/spotoutlook-name-denial-of-service","name":"VulnCheck Advisory: SpotOutlook 1.2.6 - 'Name' Denial of Service","tags":["third-party-advisory"]}],"metrics":[{"cvssV4_0":{"Automatable":"NOT_DEFINED","Recovery":"NOT_DEFINED","Safety":"NOT_DEFINED","attackComplexity":"LOW","attackRequirements":"NONE","attackVector":"LOCAL","baseScore":4.6,"baseSeverity":"MEDIUM","exploitMaturity":"NOT_DEFINED","privilegesRequired":"NONE","providerUrgency":"NOT_DEFINED","subAvailabilityImpact":"NONE","subConfidentialityImpact":"NONE","subIntegrityImpact":"NONE","userInteraction":"ACTIVE","valueDensity":"NOT_DEFINED","vectorString":"CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:A/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N","version":"4.0","vulnAvailabilityImpact":"LOW","vulnConfidentialityImpact":"NONE","vulnIntegrityImpact":"NONE","vulnerabilityResponseEffort":"NOT_DEFINED"},"format":"CVSS"},{"cvssV3_1":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"HIGH","baseScore":7.5,"baseSeverity":"HIGH","confidentialityImpact":"NONE","integrityImpact":"NONE","privilegesRequired":"NONE","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","version":"3.1"},"format":"CVSS"}],"problemTypes":[{"descriptions":[{"cweId":"CWE-120","lang":"en","description":"Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')","type":"CWE"}]}],"providerMetadata":{"shortName":"VulnCheck","orgId":"83251b91-4cc7-4094-a5c7-464a1b83ea10","dateUpdated":"2026-02-11T20:37:10.344Z"},"datePublic":"2020-01-06T00:00:00.000Z","credits":[{"lang":"en","value":"Ismail Tasdelen","type":"finder"}],"x_generator":{"engine":"vulncheck"}},"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"timestamp":"2026-02-12T16:29:32.335818Z","id":"CVE-2020-37188","options":[{"Exploitation":"poc"},{"Automatable":"yes"},{"Technical Impact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}}],"providerMetadata":{"shortName":"CISA-ADP","orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","dateUpdated":"2026-02-12T16:29:41.406Z"}}]}}}