CVE-2020-37177

HighCVSS 7.5/10Last modified Jun 17, 2026

Description

BOOTP Turbo 2.0 contains a denial of service vulnerability that allows attackers to crash the application by overwriting the Structured Exception Handler (SEH). Attackers can generate a malicious payload of 2196 bytes with specific byte patterns to trigger an application crash and corrupt the SEH chain.

Metrics

CVSS 3.1 7.5/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Weakness enumeration

CWE-121

Affected software

No affected versions have been published.

Timeline

Published
Feb 11, 2026
Last modified
Jun 17, 2026
NVD status
Deferred

Related CVEs from 2020

CVE-2020-371787.5KeePass Password Safe versions before 2.44 contain a denial of service vulnerability in the help system's HTML handling. Attackers can triggCVE-2020-371797.5APKF Product Key Finder 2.5.8.0 contains a denial of service vulnerability that allows attackers to crash the application by overflowing theCVE-2020-37189.8Magento versions 2.3.3 and earlier, 2.2.10 and earlier, 1.14.4.3 and earlier, and 1.9.4.3 and earlier have a security bypass vulnerability. CVE-2020-371807.5GTalk Password Finder 2.2.1 contains a denial of service vulnerability that allows attackers to crash the application by supplying an oversiCVE-2020-371819.8Torrent FLV Converter 1.51 Build 117 contains a stack overflow vulnerability that allows attackers to overwrite Structured Exception HandlerCVE-2020-371827.5Redir 3.3 contains a stack overflow vulnerability in the doproxyconnect() function that allows attackers to crash the application by sendingCVE-2020-371839.8Allok RM RMVB to AVI MPEG DVD Converter 3.6.1217 contains a stack overflow vulnerability that allows attackers to execute arbitrary code by CVE-2020-371849.8Allok Video Converter 4.6.1217 contains a stack overflow vulnerability in the License Name input field that allows attackers to execute arbiCVE-2020-371857.5Backup Key Recovery 2.2.5 contains a denial of service vulnerability that allows attackers to crash the application by overflowing the 'NameCVE-2020-371869.8Chevereto 3.13.4 Core contains a remote code execution vulnerability that allows attackers to inject malicious code during database configurCVE-2020-371877.5SpotDialup 1.6.7 contains a denial of service vulnerability in the registration name input field that allows attackers to crash the applicatCVE-2020-371887.5SpotOutlook 1.2.6 contains a denial of service vulnerability in the registration name input field that allows attackers to crash the applica
CVE-2020-37177: High severity, CVSS 7.5 | Vulnix