CVE-2020-37131

Katalog CVE

CVSS 5.5 · Medium EPSS 0,27%

Kerentanan Buffer Copy without Checking Size of Input ('Classic Buffer Overflow') pada nsasoft product key explorer. Skor CVSS 3.1 5.5 (Medium) menurut NVD.

Deskripsi (NVD)

Nsauditor Product Key Explorer 4.2.2.0 contains a denial of service vulnerability that allows local attackers to crash the application by inputting a specially crafted registration key. Attackers can generate a payload of 1000 bytes of repeated characters and paste it into the 'Key' input field to trigger the application crash.

Rincian

Terbit di NVD

5 Februari 2026

Terakhir diubah

29 Juni 2026

Status NVD

Analyzed

CVSS 3.1

5.5 (Medium), sumber NVD
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-120: Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

EPSS (30 hari)

0,27% peluang dieksploitasi; lebih tinggi dari 17,0% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://www.vulncheck.com/advisories/product-key-explorer-key-denial-of-service advisory pihak ketiga
• https://www.exploit-db.com/exploits/48284 exploit · vdb entry
• http://www.nsauditor.com product