CVE-2020-37193

HighCVSS 7.5/10Last modified Jun 17, 2026

Description

ZIP Password Recovery 2.30 contains a denial of service vulnerability that allows attackers to crash the application by providing maliciously crafted input. Attackers can create a specially prepared text file with specific characters to trigger an application crash when selecting a ZIP file.

Metrics

CVSS 3.1 7.5/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Weakness enumeration

CWE-120

Affected software

No affected versions have been published.

Timeline

Published
Feb 11, 2026
Last modified
Jun 17, 2026
NVD status
Deferred

Related CVEs from 2020

CVE-2020-371947.5Backup Key Recovery 2.2.5 contains a denial of service vulnerability that allows attackers to crash the application by supplying an overly lCVE-2020-371957.5BlueAuditor 1.7.2.0 contains a denial of service vulnerability in the registration name input field that allows attackers to crash the appliCVE-2020-371965.5Dnss Domain Name Search Software contains a denial of service vulnerability that allows attackers to crash the application by providing an oCVE-2020-371975.5Dnss Domain Name Search Software contains a denial of service vulnerability that allows attackers to crash the application by overflowing thCVE-2020-371987.5Duplicate Cleaner Pro 4.1.3 contains a denial of service vulnerability that allows attackers to crash the application by injecting an oversiCVE-2020-371995.5NBMonitor 1.6.6.0 contains a denial of service vulnerability in its registration key input that allows attackers to crash the application. ACVE-2020-37208.8Adobe Framemaker versions 2019.0.4 and below have an out-of-bounds write vulnerability. Successful exploitation could lead to arbitrary codeCVE-2020-372005.5NetShareWatcher 1.5.8.0 contains a buffer overflow vulnerability in the registration key input that allows attackers to crash the applicatioCVE-2020-372015.5NetShareWatcher 1.5.8.0 contains a buffer overflow vulnerability in the registration name input that allows attackers to crash the applicatiCVE-2020-372027.5NetworkSleuth 3.0.0.0 contains a denial of service vulnerability that allows attackers to crash the application by supplying an oversized reCVE-2020-372037.5Office Product Key Finder 1.5.4 contains a denial of service vulnerability that allows attackers to crash the application by manipulating thCVE-2020-372045.5RemShutdown 2.9.0.0 contains a denial of service vulnerability in its registration key input that allows attackers to crash the application.
CVE-2020-37193: High severity, CVSS 7.5 | Vulnix