Cyber Resilience

CVE-2020-37183

HighPublic PoC

Published: 11 February 2026

Published
11 February 2026
Modified
15 April 2026
KEV Added
Patch
CVSS Score v4 8.4 CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
EPSS Score 0.0042 33.5th percentile
Risk Priority 55 floored blend · peak EPSS

Summary

CVE-2020-37183 is a high-severity Stack-based Buffer Overflow (CWE-121) vulnerability in Alloksoft (inferred from references). Its CVSS base score is 8.4 (High).

Operationally, exploitation aligns with the MITRE ATT&CK technique Exploitation for Client Execution (T1203); ranked at the 33.5th percentile by exploit likelihood (below the median); it is not currently listed in the CISA KEV catalog; a public proof-of-concept is referenced.

The strongest mitigations our analysis identified are NIST 800-53 SI-10 (Information Input Validation) and SI-16 (Memory Protection).

Deeper analysis

CVE-2020-37183 is a stack overflow vulnerability (CWE-121) affecting Allok RM RMVB to AVI MPEG DVD Converter version 3.6.1217. The flaw occurs in the License Name input field, where insufficient bounds checking allows a buffer overflow that overwrites Structured Exception Handler (SEH) registers. This enables attackers to execute arbitrary code. The vulnerability carries a CVSS v3.1 base score of 9.8 (AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H), indicating critical severity with network vector, low attack complexity, and no privileges required.

Attackers can exploit this vulnerability remotely by crafting a malicious payload for the License Name field, triggering the buffer overflow upon processing. No authentication or special privileges are needed, and exploitation can achieve full remote code execution, such as running system commands like calc.exe, with high impact on confidentiality, integrity, and availability.

Advisories and references include the vendor site at https://www.alloksoft.com, a proof-of-concept exploit published on Exploit-DB at https://www.exploit-db.com/exploits/47910, and a detailed advisory from VulnCheck at https://www.vulncheck.com/advisories/allok-rm-rmvb-to-avi-mpeg-dvd-converter-stack-overflow-seh. No patches or specific mitigations are detailed in the provided information.

EU & UK References

Vulnerability details

Allok RM RMVB to AVI MPEG DVD Converter 3.6.1217 contains a stack overflow vulnerability that allows attackers to execute arbitrary code by overwriting Structured Exception Handler (SEH) registers. Attackers can craft a malicious payload in the License Name input field…

more

to trigger a buffer overflow and execute system commands like calc.exe.

CWE(s)

Related Threats

MITRE ATT&CK Enterprise TechniquesAI

T1203 Exploitation for Client Execution Execution
Adversaries may exploit software vulnerabilities in client applications to execute code.
Why these techniques?

Stack overflow with SEH overwrite in client-side converter app directly enables arbitrary code execution via crafted License Name input (T1203: Exploitation for Client Execution).

Confidence: HIGH · MITRE ATT&CK Enterprise v19.0

CVEs Like This One

CVE-2025-54480Shared CWE-121
CVE-2025-69195Shared CWE-121
CVE-2026-43661Shared CWE-121
CVE-2019-25321Shared CWE-121
CVE-2026-33554Shared CWE-121
CVE-2024-34579Shared CWE-121
CVE-2020-37142Shared CWE-121
CVE-2026-1761Shared CWE-121
CVE-2020-37181Shared CWE-121
CVE-2019-25365Shared CWE-121

Affected Assets

Alloksoft
inferred from references and description; NVD did not file a CPE for this CVE

Mitigating Controls

Mitigating Controls (NIST 800-53 r5) AI

prevent

Enforces bounds checking and validation on inputs like the License Name field to prevent buffer overflows that overwrite SEH registers.

prevent

Implements memory safeguards such as DEP, ASLR, and stack canaries to protect against exploitation of stack overflow vulnerabilities leading to arbitrary code execution.

prevent

Requires identification, reporting, and remediation of flaws like this stack overflow, including patching or removal of the vulnerable Allok converter software.

References