CVE-2020-37176 - Vulnerability Analysis

Overview

Torrent 3GP Converter 1.51 contains a stack overflow caused by overwriting Structured Exception Handler (SEH) registers in the registration dialog, letting attackers execute arbitrary code remotely, exploit requires crafted malicious payload.

Severity & Score

Impact

Attackers can execute arbitrary code remotely, potentially taking full control of the affected system.

Mitigation

Update to the latest version of Torrent 3GP Converter.

References

• http://www.torrentrockyou.com
• https://www.exploit-db.com/exploits/47965
• https://www.vulncheck.com/advisories/torrent-gp-converter-stack-overflow-seh

Related Resources

• Vulnerability Intelligence Dashboard
• Credential Scanner