CVE-2020-37031 — Simple Startup Manager 1.17 - 'File' Local Buffer Overflow
Simple Startup Manager 1.17 contains a local buffer overflow vulnerability that allows attackers to execute arbitrary code by overwriting memory through the 'File' input paramet…
Published: 2026-01-30 · CVSS: 8.6 · CVSS 4.0
Simple Startup Manager 1.17 contains a local buffer overflow vulnerability that allows attackers to execute arbitrary code by overwriting memory through the 'File' input parameter. Attackers can craft a malicious payload with 268 bytes to trigger code execution, bypassing DEP and overwriting memory addresses to launch calc.exe.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7