Exploitation Summary
EIP tracks 1 public exploit for CVE-2020-37010. PoCs published by Christian Vierschilling.
AI-analyzed exploit summary This exploit targets a buffer overflow vulnerability in BearShare Lite 5.2.5 via the 'Advanced Search' feature. It overwrites the EIP register with a JMP ESP instruction and executes alphanumeric shellcode to spawn calc.exe.
Description
BearShare Lite 5.2.5 contains a buffer overflow vulnerability in the Advanced Search keywords input that allows attackers to execute arbitrary code. Attackers can craft a specially designed payload to overwrite the EIP register and execute shellcode by pasting malicious content into the search keywords field.
Exploits (1)
This exploit targets a buffer overflow vulnerability in BearShare Lite 5.2.5 via the 'Advanced Search' feature. It overwrites the EIP register with a JMP ESP instruction and executes alphanumeric shellcode to spawn calc.exe.
References (4)
Scores
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H