CVE-2020-37187
Buffer Overflow in SpotDialup 1.6.7 Causes Application Crash
Publication date: 2026-02-11
Last updated on: 2026-02-12
Assigner: VulnCheck
Description
Description
CVSS Scores
EPSS Scores
| Probability: | |
| Percentile: |
Meta Information
Affected Vendors & Products
| Vendor | Product | Version / Range |
|---|---|---|
| nsauditor | spotdialup | to 1.6.7 (exc) |
| nsauditor | spotdialup | 1.6.7 |
| spotdialup | spotdialup | 1.6.7 |
Helpful Resources
Exploitability
| CWE ID | Description |
|---|---|
| CWE-120 | The product copies an input buffer to an output buffer without verifying that the size of the input buffer is less than the size of the output buffer. |
Attack-Flow Graph
AI Powered Q&A
How does this vulnerability affect compliance with common standards and regulations (like GDPR, HIPAA)?:
I don't know
Can you explain this vulnerability to me?
[{'type': 'paragraph', 'content': "CVE-2020-37187 is a denial of service vulnerability in SpotDialup version 1.6.7. It occurs in the registration form's 'Name' input field, where the application does not properly validate the size of the input buffer. An attacker can exploit this by submitting a specially crafted payload of about 1000 characters into the 'Name' field, which causes the application to crash."}] [2]
How can this vulnerability impact me? :
[{'type': 'paragraph', 'content': "This vulnerability can cause SpotDialup to crash, resulting in a denial of service. An attacker who can interact locally with the application and perform user interaction can trigger this crash by pasting a large payload into the 'Name' field during registration. This disrupts normal operation and availability of the software."}] [2]
How can this vulnerability be detected on my network or system? Can you suggest some commands?
[{'type': 'paragraph', 'content': "This vulnerability can be detected by attempting to reproduce the denial of service condition on the SpotDialup 1.6.7 application. Specifically, a test involves creating a payload of 1000 characters and pasting it into the 'Name' field of the registration form to see if the application crashes."}, {'type': 'paragraph', 'content': "A simple method to generate the payload is to create a file containing 1000 'A' characters and then copy and paste this content into the 'Name' input field during registration."}, {'type': 'paragraph', 'content': 'For example, on a system with Python installed, you can run the following command to create the payload file:'}, {'type': 'list_item', 'content': 'python -c "print(\'A\'*1000)" > poc.txt'}, {'type': 'paragraph', 'content': "Then open the file, copy the content, and paste it into the 'Name' field of SpotDialup's registration dialog. If the application crashes, the vulnerability is present."}] [1, 2]
What immediate steps should I take to mitigate this vulnerability?
[{'type': 'paragraph', 'content': "Immediate mitigation steps include avoiding the use of the vulnerable SpotDialup 1.6.7 application or restricting access to it, especially the registration form where the 'Name' input field is located."}, {'type': 'paragraph', 'content': 'Since the vulnerability requires user interaction and local access, limiting user permissions and preventing untrusted users from accessing the application can reduce risk.'}, {'type': 'paragraph', 'content': 'Additionally, monitor for any updates or patches from the vendor and apply them as soon as they become available.'}] [2]