CVE-2020-37221 - Vulnerability Analysis

Overview

Atomic Alarm Clock 6.3 contains a stack overflow caused by supplying a malicious string to the display name textbox in the Time Zones Clock configuration, letting local attackers execute arbitrary code with application privileges, exploit requires local access.

Severity & Score

Impact

Local attackers can execute arbitrary code with application privileges, potentially leading to full system compromise.

Mitigation

Update to the latest version of Atomic Alarm Clock.

References

• https://www.exploit-db.com/exploits/48346
• https://www.vulncheck.com/advisories/atomic-alarm-clock-stack-overflow-via-seh-unicode

Related Resources

• Vulnerability Intelligence Dashboard
• Credential Scanner