CVE-2020-37188
HIGHSpotOutlook 1.2.6 - Denial of Service via Registration Name Input Buffer Overflow
Title source: llmExploitation Summary
EIP tracks 1 public exploit for CVE-2020-37188. PoCs published by Ismail Tasdelen.
AI-analyzed exploit summary This PoC exploits a buffer overflow vulnerability in SpotOutlook 1.2.6 by writing a large payload of 'A' characters to a file, which when pasted into the 'Name' field during registration, causes the application to crash. The exploit demonstrates a Denial of Service (DoS) condition.
Description
SpotOutlook 1.2.6 contains a denial of service vulnerability in the registration name input field that allows attackers to crash the application. Attackers can overwrite the buffer by pasting 1000 'A' characters into the 'Name' field, causing the application to become unresponsive.
Exploits (1)
This PoC exploits a buffer overflow vulnerability in SpotOutlook 1.2.6 by writing a large payload of 'A' characters to a file, which when pasted into the 'Name' field during registration, causes the application to crash. The exploit demonstrates a Denial of Service (DoS) condition.
References (3)
Scores
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H