CVE-2020-37196

Analyzed Analyzed - Analysis Complete

Denial of Service via Oversized Registration Key in Dnss

Publication date: 2026-02-11

Last updated on: 2026-06-29

Assigner: VulnCheck

Description

Dnss Domain Name Search Software contains a denial of service vulnerability that allows attackers to crash the application by providing an oversized registration key. Attackers can generate a 1000-character buffer payload and paste it into the registration key field to trigger an application crash.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-02-11

Last Modified

2026-06-29

Generated

2026-07-06

AI Q&A

2026-02-11

EPSS Evaluated

2026-07-05

NVD

CVE-2020-37196

EUVD

EUVD-2020-31178

Affected Vendors & Products

Vendor	Product	Version / Range
nsasoft	domain_name_search_software	*

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-120	The product copies an input buffer to an output buffer without verifying that the size of the input buffer is less than the size of the output buffer.

Attack-Flow Graph

Executive Summary

CVE-2020-37196 is a denial of service vulnerability in the Dnss Domain Name Search Software. It occurs because the software does not properly check the size of the input in the registration key field, leading to a buffer overflow condition.

An attacker can create a payload of about 1000 characters and paste it into the registration key field, which causes the application to crash.

This vulnerability is classified under CWE-120, which involves buffer copy without size checking.

Impact Analysis

This vulnerability can cause the Dnss Domain Name Search Software to crash, resulting in a denial of service condition.

An attacker with local access and the ability to interact with the user interface can trigger this crash by inputting an oversized registration key.

The impact is primarily on availability, as the application becomes unstable and unusable until restarted.

Compliance Impact

I don't know

Detection Guidance

[{'type': 'paragraph', 'content': 'This vulnerability can be detected by attempting to reproduce the denial of service condition on the Dnss Domain Name Search Software. Specifically, an attacker or tester can generate a payload of approximately 1000 characters and input it into the registration key field of the application to see if it crashes.'}, {'type': 'paragraph', 'content': "A practical detection method involves using a Python script to create a payload file containing 1000 'A' characters, then pasting this payload into the registration key field of the software's registration dialog."}, {'type': 'list_item', 'content': "Run a Python script to generate the payload: \n```python\nwith open('poc.txt', 'w') as f:\n f.write('A' * 1000)\n```"}, {'type': 'list_item', 'content': 'Open the Dnss software registration dialog.'}, {'type': 'list_item', 'content': "Copy the contents of 'poc.txt' and paste it into the registration key field."}, {'type': 'list_item', 'content': "Click 'Ok' and observe if the application crashes, indicating the presence of the vulnerability."}] [2]

Mitigation Strategies

I don't know

Hi! I’m here to help you understand CVE-2020-37196. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70