CVE Intelligence
Analysis AI-assisted

CVE-2020-37161: Wedding Slideshow Studio: stack-based buffer overflow in registration name field

CVE-2020-37161 is a stack-based buffer overflow (CWE-121) in Wedding Slideshow Studio up to version 1.36, triggered through the registration name field. The record describes possible arbitrary code execution and is scored Critical (CVSS 3.1 base score 9.8) by VulnCheck. No fixed version is listed, and the sources consulted show no confirmed exploitation in the wild.

Published Oct 13, 2026 · Updated Oct 13, 2026 · Ler em português

Overview

CVE-2020-37161 affects Wedding Slideshow Studio up to and including version 1.36. The record classifies it as a stack-based buffer overflow (CWE-121) in the registration name field. According to the record, a specially crafted value in that field can lead to arbitrary code execution. The record says this was demonstrated by launching the calculator application, which is a common proof of concept for command execution.

Impact

  • The record states that the flaw allows arbitrary code execution, which would give an attacker the same privileges as the running application.
  • VulnCheck assigns a CVSS 3.1 base score of 9.8 (Critical) with vector CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H, which indicates network reachability, low complexity, no privileges or user interaction required, and high confidentiality, integrity and availability impact.
  • VulnCheck also lists a CVSS 4.0 score of 8.4.
  • NVD and the CVE Program entries were used as the official identifiers for this record.

Affected products and versions

  • Product listed as Wedding-slideshow-studio Wedding Slideshow Studio.
  • Versions listed as up to and including 1.36.
  • No fixed version is listed in the record. The absence of a fixed version does not confirm that no fix exists; it means the available data does not report one.

Exploitation status

The CISA Known Exploited Vulnerabilities catalog does not list this CVE, so active exploitation is not confirmed by that source. The sources consulted show no confirmed exploitation in the wild. The EPSS probability is 0.0098 with a percentile of 0.61232, as recorded. The references include an Exploit-DB entry tagged as an exploit, which indicates public proof-of-concept material exists. That is not evidence of attacks in progress.

Remediation and mitigation

  • Identify all installations of Wedding Slideshow Studio, including versions 1.36 and earlier, across endpoints and shared systems.
  • Check the vendor site and the VulnCheck advisory for an update or replacement, since the record does not list a fix.
  • If no update is available, remove or stop using the affected software until a supported version is confirmed.
  • Restrict who can run the application and avoid processing untrusted slideshow or registration data with it.
  • Apply application control and least-privilege policies so that a compromised application has limited ability to run other programs.

Detection guidance

  • Monitor for unexpected crashes or restarts of the slideshow application, which can accompany memory corruption attempts.
  • Review endpoint telemetry for the slideshow application spawning unusual child processes.
  • Track installations and versions of the software in asset inventories so that exposure can be assessed quickly.

Limitations of the available information

  • The record does not include a vendor advisory with technical detail, a confirmed patch, or a fixed version.
  • The title field in the source record was empty, so titles here were written from the description.
  • The EPSS entry carries a date later than the publication date, and this analysis reports it as recorded without interpretation.
  • Whether the product is still distributed or supported is not stated in the record.

Frequently asked questions

What is CVE-2020-37161?

It is a stack-based buffer overflow (CWE-121) in Wedding Slideshow Studio up to version 1.36, triggered through the registration name field. The record says it may allow arbitrary code execution.

Is this vulnerability being actively exploited?

The CISA KEV catalog does not list this CVE, and the sources consulted show no confirmed exploitation in the wild. The references include a public Exploit-DB entry, which indicates proof-of-concept material is public.

Is there a fixed version?

The record does not list a fixed version. Users should check the vendor site and the VulnCheck advisory for an update, and remove or stop using the software if no supported version is available.

This analysis was drafted with AI assistance from verified source data and automatically checked against it.