CVE-2020-37010CWE-120

BearShare Lite 5.2.5 - 'Advanced Search'Buffer Overflow in (PoC)

High · published January 29, 2026

CVSS v4.0
8.4
EPSS
0%
Percentile
40.5
In the wild
Unconfirmed
What it is

⚡ A crafty buffer overflow lurks in BearShare Lite 5.2.5, ready for attackers to take control! Just one malicious paste in the Advanced Search input is all it takes! Think of it like a waiter accepting a fake menu order that has the power to completely change the kitchen's recipes — a simple oversight can lead to chaos! If an attacker exploits this vulnerability, they could execute arbitrary code on your system, gaining unauthorized access to sensitive data or even hijacking control altogether. It’s like handing over the keys to your digital fortress without realizing it!

Put simply

Think of it like a waiter accepting a fake menu order that has the power to completely change the kitchen's recipes — a simple oversight can lead to chaos! This buffer overflow vulnerability occurs in the Advanced Search keywords input, allowing attackers to overwrite the EIP register and run their own shellcode merely by pasting crafted content.

What to do

If an attacker exploits this vulnerability, they could execute arbitrary code on your system, gaining unauthorized access to sensitive data or even hijacking control altogether. It’s like handing over the keys to your digital fortress without realizing it! To protect yourself, upgrade BearShare Lite to the latest version immediately. Consider implementing input validation to safeguard against malicious payloads in any input fields. Ensure to regularly audit and monitor your applications for similar vulnerabilities. 🛡️ You've got this! With a few simple steps, you can secure your setup and keep the threats at bay! 🚀

The record
Technical detail
CVSS v4.0
8.4 · HIGH
Vector
CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
EPSS
0.00481 · 40.5th percentile
Weakness
CWE-120 · Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')
Published
2026-01-29T14:28Z
EPSS history
Timeline
  • 29 JAN 14:28Z
    BearShare Lite 5.2.5 - 'Advanced Search'Buffer Overflow in (PoC)
    cvelistv5