CVE-2020-37188CWE-120
SpotOutlook 1.2.6 - 'Name' Denial of Service
Medium · published February 11, 2026
What it is
SpotOutlook 1.2.6 contains a denial of service vulnerability in the registration name input field that allows attackers to crash the application. Attackers can overwrite the buffer by pasting 1000 'A' characters into the 'Name' field, causing the application to become unresponsive.
The record
Technical detail
- CVSS v4.0
- 4.6 · MEDIUM
- Vector
- CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:A/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N
- EPSS
- 0.00444 · 37.6th percentile
- Weakness
- CWE-120 · Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')
- Published
- 2026-02-11T20:37Z
EPSS history
Timeline