nvd.nist.gov
https://nvd.nist.gov/vuln/detail/CVE-2020-37119 CVE-2020-37119
HIGH
Nsauditor 3.2.1.0 - Buffer Overflow (SEH+ASLR bypass (3 bytes overwrite))
Record summary
CVE-2020-37119 has a selected CVSS score of 8.4 (high); EIP currently links 1 catalogued exploit.
Description
Nsauditor 3.0.28 and 3.2.1.0 contains a buffer overflow vulnerability in the DNS Lookup tool that allows attackers to execute arbitrary code by overwriting memory. Attackers can craft a malicious DNS query payload to trigger a three-byte overwrite, bypass ASLR, and execute shellcode through a carefully constructed exploit.
Description source: CVE List
Exploitation context
Available material
- Catalogued exploits
- 1
CISA SSVC decision
ExploitationPoC
AutomatableYes
Technical impactTotal
CISA Coordinator · SSVC 2.0.3 · Evaluated Feb 6, 2026 · Source: CVE List
Affected products and versions
1| Product | Source | Version range | Status |
|---|---|---|---|
NsauditorBrowse Nsasoft / Nsauditor | CVE List | 3.2.1.0 | affected |
| 3.0.28 | affected |
Proofs of concept
1Catalogued exploits
ExploitDBNsauditor 3.2.1.0 - Buffer Overflow (SEH+ASLR bypass (3 bytes overwrite))ExploitDB exploitby CervoiseNot analyzed1 file
References
4ExploitDB-48350exploit
https://www.exploit-db.com/exploits/48350 Nsauditor Homepageproduct
https://www.nsauditor.com/ VulnCheck Advisory: Nsauditor 3.2.1.0 - Buffer Overflow (SEH+ASLR bypass (3 bytes overwrite))Third-party advisory
https://www.vulncheck.com/advisories/nsauditor-buffer-overflow-sehaslr-bypass-bytes-overwrite