PT-2026-5276 · Cleanersoft · Free Mp3 Cd Ripper

Eduard Palisek · Published 2026-01-29 · Updated 2026-01-29 · CVE-2020-37000

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Free MP3 CD Ripper version 2.8

Description A stack buffer overflow allows remote attackers to execute arbitrary code by processing a specially crafted WAV file containing an oversized payload. This can be achieved using shellcode, SEH (Structured Exception Handling) bypass, and egghunter techniques on affected Windows systems.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Stack Overflow

Weakness Enumeration

CWE-121

Related Identifiers

CVE-2020-37000

Affected Products

Free Mp3 Cd Ripper

References · 4

• 🔥 https://exploit-db.com/exploits/48696 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2020-37000 · Security Note
• https://vulncheck.com/advisories/free-mp-cd-ripper-stack-buffer-overflow-seh-egghunter · Note
• https://cleanersoft.com · Note