Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2020-37161

Опубликовано: 07 фев. 2026
Источник: nvd
CVSS3: 9.8
EPSS Низкий

Описание

Wedding Slideshow Studio 1.36 contains a buffer overflow vulnerability that allows attackers to execute arbitrary code by overwriting the registration name field with malicious payload. Attackers can craft a specially designed payload to trigger remote code execution, demonstrating the ability to run system commands like launching the calculator.

Уязвимые конфигурации

Конфигурация 1
cpe:2.3:a:wedding-slideshow-studio:wedding_slideshow_studio:*:*:*:*:*:*:*:*
Версия до 1.36 (включая)

EPSS

Процентиль: 58%
0.00904
Низкий

9.8 Critical

CVSS3

Дефекты

CWE-121

Связанные уязвимости

CVSS3: 9.8
github
7 месяцев назад

Wedding Slideshow Studio 1.36 contains a buffer overflow vulnerability that allows attackers to execute arbitrary code by overwriting the registration name field with malicious payload. Attackers can craft a specially designed payload to trigger remote code execution, demonstrating the ability to run system commands like launching the calculator.

EPSS

Процентиль: 58%
0.00904
Низкий

9.8 Critical

CVSS3

Дефекты

CWE-121