CVE-2020-37010

Impact

BearShare Lite 5.2.5 contains a buffer overflow vulnerability in the Advanced Search keywords input that allows attackers to execute arbitrary code. Attackers can craft a specially designed payload to overwrite the EIP register and execute shellcode by pasting malicious content into the search keywords field.

Affected packages

This record carries no package version data, so it cannot be matched against a dependency list automatically. Read the advisory and compare your version by hand.

Weakness classification

References

• NVD record
• CVE.org record
• http://www.bearshareofficial.com/
• http://www.oldversion.com.de/windows/bearshare-lite-5-2-5
• https://www.exploit-db.com/exploits/48839
• https://www.vulncheck.com/advisories/bearshare-lite-advanced-searchbuffer-overflow-in-poc
• https://www.exploit-db.com/exploits/48839