CVE-2020-37000

HIGH

Free MP3 CD Ripper 2.8 - Stack Buffer Overflow (SEH + Egghunter)

Title source: CVE List
Search associated code STIX 2.1 vulnerability STIX 2.1 with PoCs

Record summary

CVE-2020-37000 has a selected CVSS score of 8.4 (high); EIP currently links 1 catalogued exploit.

Description

Free MP3 CD Ripper 2.8 contains a stack buffer overflow vulnerability that allows remote attackers to execute arbitrary code by crafting a malicious WAV file with oversized payload. Attackers can leverage a specially crafted exploit file with shellcode, SEH bypass, and egghunter technique to achieve remote code execution on vulnerable Windows systems.

Description source: CVE List

Exploitation context

Available material

Catalogued exploits
1

CISA SSVC decision

ExploitationPoC
AutomatableYes
Technical impactTotal

CISA Coordinator · SSVC 2.0.3 · Evaluated Jan 29, 2026 · Source: CVE List

Affected products and versions

1
ProductSourceVersion range

Free MP3 CD Ripper

Browse Cleanersoft Software / Free MP3 CD Ripper
CVE List2.8 Build 20140611affected

Proofs of concept

1

Catalogued exploits

ExploitDBFree MP3 CD Ripper 2.8 - Stack Buffer Overflow (SEH + Egghunter)ExploitDB exploitby Eduard PalisekNot analyzed1 file
ExploitDB
PoC details

References

4