Vulnerability · Published Jan 29, 2026 · Assigned by VulnCheck

CVE-2020-37000Free MP3 CD Ripper 2.8 - Stack Buffer Overflow (SEH + Egghunter)

Critical 9.8

In plain English

A critical-severity stack buffer overflow in Free MP3 CD Ripper from Cleanersoft Software. Proof-of-concept exploit code is public. The chance it is exploited in the next 30 days is estimated at 0.6% (higher than 46% of all known vulnerabilities).

Severity (CVSS 3.1)9.8Critical

Exploit odds (30 days)0.6%top 53.8% of all CVEs

Exploited in the wildNo reportsCISA SSVC: poc

Attack toolingNoneno public tooling known

Official description

Free MP3 CD Ripper 2.8 contains a stack buffer overflow vulnerability that allows remote attackers to execute arbitrary code by crafting a malicious WAV file with oversized payload. Attackers can leverage a specially crafted exploit file with shellcode, SEH bypass, and egghunter technique to achieve remote code execution on vulnerable Windows systems.

Affected products (as reported)

Vendor	Product	Versions
Cleanersoft Software	Free MP3 CD Ripper	2.8 Build 20140611

Weakness: CWE-121 · Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

References

ExploitDB-48696 exploit
Vendor Homepage product
VulnCheck Advisory: Free MP3 CD Ripper 2.8 - Stack Buffer Overflow (SEH + Egghunter) third-party-advisory