CVE-2020-37196
Awaiting Analysis Awaiting Analysis - Queue
Denial of Service via Oversized Registration Key in Dnss

Publication date: 2026-02-11

Last updated on: 2026-02-27

Assigner: VulnCheck

Description
Dnss Domain Name Search Software contains a denial of service vulnerability that allows attackers to crash the application by providing an oversized registration key. Attackers can generate a 1000-character buffer payload and paste it into the registration key field to trigger an application crash.
CVSS Scores
EPSS Scores
Probability:
Percentile:
Meta Information
Published
2026-02-11
Last Modified
2026-02-27
Generated
2026-06-16
AI Q&A
2026-02-11
EPSS Evaluated
2026-06-14
NVD
CVE-2020-37196
EUVD
EUVD-2020-31178
Affected Vendors & Products
Showing 1 associated CPE
Vendor Product Version / Range
nsasoft domain_name_search_software *
Helpful Resources
Exploitability
CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-120 The product copies an input buffer to an output buffer without verifying that the size of the input buffer is less than the size of the output buffer.
Attack-Flow Graph
AI Quick Actions
Instant insights powered by AI
Executive Summary

CVE-2020-37196 is a denial of service vulnerability in the Dnss Domain Name Search Software. It occurs because the software does not properly check the size of the input in the registration key field, leading to a buffer overflow condition.

An attacker can create a payload of about 1000 characters and paste it into the registration key field, which causes the application to crash.

This vulnerability is classified under CWE-120, which involves buffer copy without size checking.

Impact Analysis

This vulnerability can cause the Dnss Domain Name Search Software to crash, resulting in a denial of service condition.

An attacker with local access and the ability to interact with the user interface can trigger this crash by inputting an oversized registration key.

The impact is primarily on availability, as the application becomes unstable and unusable until restarted.

Compliance Impact

I don't know

Detection Guidance

[{'type': 'paragraph', 'content': 'This vulnerability can be detected by attempting to reproduce the denial of service condition on the Dnss Domain Name Search Software. Specifically, an attacker or tester can generate a payload of approximately 1000 characters and input it into the registration key field of the application to see if it crashes.'}, {'type': 'paragraph', 'content': "A practical detection method involves using a Python script to create a payload file containing 1000 'A' characters, then pasting this payload into the registration key field of the software's registration dialog."}, {'type': 'list_item', 'content': "Run a Python script to generate the payload: \n```python\nwith open('poc.txt', 'w') as f:\n f.write('A' * 1000)\n```"}, {'type': 'list_item', 'content': 'Open the Dnss software registration dialog.'}, {'type': 'list_item', 'content': "Copy the contents of 'poc.txt' and paste it into the registration key field."}, {'type': 'list_item', 'content': "Click 'Ok' and observe if the application crashes, indicating the presence of the vulnerability."}] [2]

Mitigation Strategies

I don't know

Chat Assistant
Ask questions about this CVE
Hi! I’m here to help you understand CVE-2020-37196. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70
EPSS Chart