CVE-2020-36967
Published: 28 January 2026
Summary
CVE-2020-36967 is a high-severity Stack-based Buffer Overflow (CWE-121) vulnerability in Zortam Mp3 Media (inferred from references). Its CVSS base score is 8.4 (High).
Operationally, exploitation aligns with the MITRE ATT&CK technique Exploitation for Client Execution (T1203); ranked at the 39.6th percentile by exploit likelihood (below the median); it is not currently listed in the CISA KEV catalog; a public proof-of-concept is referenced.
The strongest mitigations our analysis identified are NIST 800-53 RA-5 (Vulnerability Monitoring and Scanning) and SI-16 (Memory Protection).
Deeper analysis
CVE-2020-36967 is a buffer overflow vulnerability (CWE-121) in Zortam Mp3 Media Studio version 27.60, specifically within the library creation file selection process. This flaw enables remote code execution when attackers craft a malicious text file containing shellcode that triggers a structured exception handler (SEH) overwrite. The vulnerability carries a CVSS v3.1 base score of 9.8 (AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) and was published on 2026-01-28.
Remote attackers require no privileges or authentication to exploit this issue. By delivering a specially crafted text file through the library creation process, they can achieve arbitrary command execution on the target system, potentially compromising confidentiality, integrity, and availability.
Advisories from VulnCheck (https://www.vulncheck.com/advisories/zortam-mp-media-studio-remote-code-execution-seh) and a proof-of-concept exploit on Exploit-DB (https://www.exploit-db.com/exploits/49084) detail the vulnerability. The vendor's website (https://www.zortam.com/index.html and https://www.zortam.com/download.html) provides access to software downloads, where patched versions may be available.
EU & UK References
- 🇪🇺 ENISA EUVD: EUVD-2020-30883
Vulnerability details
Zortam Mp3 Media Studio 27.60 contains a buffer overflow vulnerability in the library creation file selection process that allows remote code execution. Attackers can craft a malicious text file with shellcode to trigger a structured exception handler (SEH) overwrite and…
more
execute arbitrary commands on the target system.
- CWE(s)
Related Threats
MITRE ATT&CK Enterprise TechniquesAI
Why these techniques?
Buffer overflow vulnerability in client application Zortam Mp3 Media Studio enables remote code execution without user interaction, directly facilitating T1203: Exploitation for Client Execution.
CVEs Like This One
Affected Assets
Mitigating Controls
Mitigating Controls (NIST 800-53 r5) AI
Requires timely identification, reporting, and remediation of software flaws like this buffer overflow to prevent remote code execution via patching or upgrades.
Implements memory protections such as DEP and ASLR that directly counter SEH overwrite exploits from buffer overflows, blocking arbitrary code execution.
Enables scanning for known vulnerabilities like CVE-2020-36967 in software components to identify and prioritize remediation of vulnerable Zortam Mp3 Media Studio instances.