CVE-2020-36965CWE-121

docPrint Pro 8.0 - 'Add URL' Buffer Overflow (SEH Egghunter)

High · published January 28, 2026

CVSS v4.0
8.4
EPSS
0%
Percentile
6.0
In the wild
Unconfirmed
What it is

⚡ A crafty payload can exploit a buffer overflow in docPrint Pro 8.0! With just a local input in the 'Add URL' field, attackers can rewrite memory and take control! 🔥 Think of it as a faulty assembly line where one misfiled piece can derail the entire operation. An unsuspecting operator inputs a URL, but it opens the door for a malicious creation that can rewrite the whole system's function, like rerouting packages meant for delivery off to who-knows-where! An attacker could seize total control of the system, executing arbitrary code and potentially compromising sensitive data. This is not just a minor inconvenience—imagine a thief letting themselves in, rummaging through your files, and even taking over your computer! The fallout could be absolutely devastating if this vulnerability is left unaddressed.

Put simply

Think of it as a faulty assembly line where one misfiled piece can derail the entire operation. An unsuspecting operator inputs a URL, but it opens the door for a malicious creation that can rewrite the whole system's function, like rerouting packages meant for delivery off to who-knows-where! This buffer overflow vulnerability in docPrint Pro 8.0 allows attackers to overwrite memory by crafting a malicious payload in the 'Add URL' input field. This leads to a structured exception handler (SEH) overwrite, granting the execution of arbitrary shellcode.

What to do

An attacker could seize total control of the system, executing arbitrary code and potentially compromising sensitive data. This is not just a minor inconvenience—imagine a thief letting themselves in, rummaging through your files, and even taking over your computer! The fallout could be absolutely devastating if this vulnerability is left unaddressed. Update docPrint Pro to the latest version immediately to mitigate this risk. Additionally, implement strict input validation to prevent the exploitation of buffer overflows in user-provided data. It's essential to regularly review your security practices! You've got this! Take these steps to secure your systems and keep the bad guys out! 🛡️

The record
Technical detail
CVSS v4.0
8.4 · HIGH
Vector
CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
EPSS
0.00170 · 6.0th percentile
Weakness
CWE-121 · Stack-based Buffer Overflow
Published
2026-01-28T17:35Z
EPSS history
Timeline
  • 28 JAN 17:35Z
    docPrint Pro 8.0 - 'Add URL' Buffer Overflow (SEH Egghunter)
    cvelistv5