CVE-2020-37024
Published: 30 January 2026
Summary
CVE-2020-37024 is a high-severity Classic Buffer Overflow (CWE-120) vulnerability in Softonic (inferred from references). Its CVSS base score is 8.4 (High).
Operationally, exploitation aligns with the MITRE ATT&CK technique Exploitation for Client Execution (T1203); ranked at the 5.2th percentile by exploit likelihood (below the median); it is not currently listed in the CISA KEV catalog; a public proof-of-concept is referenced.
The strongest mitigations our analysis identified are NIST 800-53 SI-10 (Information Input Validation) and SI-16 (Memory Protection).
Deeper analysis
CVE-2020-37024 is a stack-based buffer overflow vulnerability (CWE-120) affecting Nidesoft DVD Ripper version 5.2.18, specifically in the License Code registration parameter. The flaw enables attackers to execute arbitrary code by crafting a malicious payload and pasting it into the License Code field, which triggers the overflow and allows shellcode execution. It carries a CVSS v3.1 base score of 8.4 (AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H).
A local attacker can exploit this vulnerability with low attack complexity and no required privileges. The CVSS assessment indicates no user interaction is needed beyond local access, resulting in high impacts to confidentiality, integrity, and availability. Successful exploitation provides full arbitrary code execution on the target system.
Advisories and related resources include the Nidesoft DVD Ripper page on Softonic, an exploit published on Exploit-DB (ID 48687), and a VulnCheck advisory on the local buffer overflow. No patches or specific mitigation steps are detailed in the provided references.
EU & UK References
- 🇪🇺 ENISA EUVD: EUVD-2020-30952
Vulnerability details
Nidesoft DVD Ripper 5.2.18 contains a local buffer overflow vulnerability in the License Code registration parameter that allows attackers to execute arbitrary code. Attackers can craft a malicious payload and paste it into the License Code field to trigger a…
more
stack-based buffer overflow and execute shellcode.
- CWE(s)
Related Threats
MITRE ATT&CK Enterprise TechniquesAI
Why these techniques?
Local stack buffer overflow in client application directly enables arbitrary code execution via crafted input (license code field).
CVEs Like This One
Affected Assets
Mitigating Controls
Mitigating Controls (NIST 800-53 r5) AI
Directly validates the License Code input to block malicious payloads that trigger the stack-based buffer overflow.
Implements memory safeguards like ASLR and DEP to prevent arbitrary code execution from the stack buffer overflow.
Requires timely remediation of the identified buffer overflow flaw through patching or software removal.