CVE-2020-37176
CRITICALCVSS Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Lifecycle Timeline
3Description
Torrent 3GP Converter 1.51 contains a stack overflow vulnerability that allows attackers to execute arbitrary code by overwriting Structured Exception Handler (SEH) registers. Attackers can craft a malicious payload targeting the application's registration dialog to trigger code execution and open the calculator through carefully constructed buffer overflow techniques.
Analysis
Stack overflow in Torrent 3GP Converter 1.51 via SEH overwrite. PoC available.
Technical Context
CWE-121 stack overflow corrupting SEH chain.
Affected Products
['Torrent 3GP Converter 1.51']
Remediation
Replace with maintained converter.
Priority Score
Share
External POC / Exploit Code
Leaving vuln.today