← volver
CVE-2020-36965

docPrint Pro 8.0 - 'Add URL' Buffer Overflow (SEH Egghunter)

CVSS 8.4 HIGHEPSS 0.1%CWE-121
Vexday Risk Score
21Bajo
Decisión SSVC (CISA)
Track
Sin señal de explotación → monitorear
CVSS 8.4EPSS 0.1%KEV nãoPoC Nuclei Metasploit Patch
Ciclo de vida
28 ene 2026Publicada en NVD
Recomendación: Monitorear — sin señal de explotación por ahora.
docPrint Pro 8.0 contains a local buffer overflow vulnerability in the 'Add URL' input field that allows attackers to execute arbitrary code by overwriting memory. Attackers can craft a malicious payload that triggers a structured exception handler (SEH) overwrite to execute shellcode and gain remote system access.
CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N