CVE-2020-37010
Published: 29 January 2026
Summary
CVE-2020-37010 is a high-severity Classic Buffer Overflow (CWE-120) vulnerability in Bearshareofficial (inferred from references). Its CVSS base score is 8.4 (High).
Operationally, exploitation aligns with the MITRE ATT&CK technique Exploitation for Client Execution (T1203); ranked at the 34.8th percentile by exploit likelihood (below the median); it is not currently listed in the CISA KEV catalog; a public proof-of-concept is referenced.
The strongest mitigations our analysis identified are NIST 800-53 SI-10 (Information Input Validation) and SI-16 (Memory Protection).
Deeper analysis
CVE-2020-37010 is a buffer overflow vulnerability (CWE-120) in BearShare Lite 5.2.5, specifically within the Advanced Search keywords input field. The issue arises from inadequate bounds checking, allowing attackers to craft a specially designed payload that overwrites the EIP register and executes arbitrary shellcode when malicious content is pasted into the search keywords field.
The vulnerability carries a CVSS v3.1 base score of 9.8 (AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H), indicating it is exploitable remotely over the network with low attack complexity, no privileges, and no user interaction required. Attackers can achieve high impacts on confidentiality, integrity, and availability, potentially gaining full arbitrary code execution on the affected system.
Advisories and proof-of-concept exploits are available via references including Exploit-DB (exploit 48839) and VulnCheck's advisory on the BearShare Lite Advanced Search buffer overflow PoC. Additional links point to the BearShare official site and an old version download page for BearShare Lite 5.2.5, though no patches or vendor-specific mitigations are detailed in the provided information.
EU & UK References
- 🇪🇺 ENISA EUVD: EUVD-2020-30905
Vulnerability details
BearShare Lite 5.2.5 contains a buffer overflow vulnerability in the Advanced Search keywords input that allows attackers to execute arbitrary code. Attackers can craft a specially designed payload to overwrite the EIP register and execute shellcode by pasting malicious content…
more
into the search keywords field.
- CWE(s)
Related Threats
MITRE ATT&CK Enterprise TechniquesAI
Why these techniques?
Buffer overflow in client application directly enables arbitrary code execution via crafted input, mapping to Exploitation for Client Execution.
CVEs Like This One
Affected Assets
Mitigating Controls
Mitigating Controls (NIST 800-53 r5) AI
Directly enforces bounds checking and validation on the Advanced Search keywords input to prevent buffer overflows from malicious payloads.
Implements memory protections like non-executable stacks and ASLR to block arbitrary code execution from EIP overwrite exploits.
Mandates remediation of the specific buffer overflow flaw in BearShare Lite through patching, configuration, or software removal.