BearShare Lite 5.2.5 - 'Advanced Search'Buffer Overflow in (PoC) | Advisories

Advisories

BearShare Lite 5.2.5 - 'Advanced Search'Buffer Overflow in (PoC)

severity: none
date: January 29, 2026
Affecting: BearShare Lite <= 5.2.5
CVE: CVE-2020-37010
CWE: CWE-120 Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')
CVSS: 0
CVSS V4 Vector: CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
References: ExploitDB-48839
Official BearShare Homepage
BearShare Lite 5.2.5 Download Page
Credit: Christian Vierschilling
Description: BearShare Lite 5.2.5 contains a buffer overflow vulnerability in the Advanced Search keywords input that allows attackers to execute arbitrary code. Attackers can craft a specially designed payload to overwrite the EIP register and execute shellcode by pasting malicious content into the search keywords field.