Vulnerability Description
B64dec 1.1.2 contains a buffer overflow vulnerability that allows attackers to execute arbitrary code by overwriting Structured Exception Handler (SEH) with crafted input. Attackers can leverage an egg hunter technique and carefully constructed payload to inject and execute malicious code during base64 decoding process.
CVSS Score
CRITICAL
Related Weaknesses (CWE)
References
- http://4mhz.de/b64dec.html
- https://www.exploit-db.com/exploits/48317
- https://www.vulncheck.com/advisories/bdec-buffer-overflow-seh-overflow-egg-hunte
FAQ
What is CVE-2020-37124?
CVE-2020-37124 is a vulnerability with a CVSS score of 9.8 (CRITICAL). B64dec 1.1.2 contains a buffer overflow vulnerability that allows attackers to execute arbitrary code by overwriting Structured Exception Handler (SEH) with crafted input. Attackers can leverage an eg...
How severe is CVE-2020-37124?
CVE-2020-37124 has been rated CRITICAL with a CVSS base score of 9.8/10. This is considered a critical vulnerability requiring immediate attention.
Is there a patch for CVE-2020-37124?
Check the references section above for vendor advisories and patch information. Review vendor security bulletins for remediation guidance.