Exploitation Summary
EIP tracks 1 public exploit for CVE-2020-37162. PoCs published by ZwX.
AI-analyzed exploit summary This exploit leverages a buffer overflow vulnerability in Wedding Slideshow Studio 1.36 by overwriting the SEH handler and executing shellcode to spawn a calculator. The payload is crafted to bypass SafeSEH and ASLR protections in the target DLL.
Description
Wedding Slideshow Studio 1.36 contains a buffer overflow vulnerability in the registration key input that allows attackers to execute arbitrary code by overwriting memory. Attackers can craft a malicious payload of 1608 bytes to trigger a stack-based buffer overflow and execute commands through the registration key field.
Exploits (1)
This exploit leverages a buffer overflow vulnerability in Wedding Slideshow Studio 1.36 by overwriting the SEH handler and executing shellcode to spawn a calculator. The payload is crafted to bypass SafeSEH and ASLR protections in the target DLL.
References (3)
Scores
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H