Exploitation Summary
EIP tracks 1 public exploit for CVE-2020-37126. PoCs published by boku.
AI-analyzed exploit summary This exploit demonstrates a Unicode stack overflow vulnerability in Free Desktop Clock 3.0, leveraging SEH overwrite and the Venetian Blinds technique to bypass bad characters and execute arbitrary code. The PoC includes a detailed decoder and shellcode execution mechanism.
Description
Free Desktop Clock 3.0 contains a stack overflow vulnerability in the Time Zones display name input that allows attackers to overwrite Structured Exception Handler (SEH) registers. Attackers can exploit the vulnerability by crafting a malicious Unicode input that triggers an access violation and potentially execute arbitrary code.
Exploits (1)
This exploit demonstrates a Unicode stack overflow vulnerability in Free Desktop Clock 3.0, leveraging SEH overwrite and the Venetian Blinds technique to bypass bad characters and execute arbitrary code. The PoC includes a detailed decoder and shellcode execution mechanism.
References (3)
Scores
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H