CVE-2020-37000: Cleanersoft Software Free MP3 Cd Ripper

Critical severity, CVSS 9.8. EPSS: 0.5% chance of exploitation in the next 30 days.

Free MP3 CD Ripper 2.8 contains a stack buffer overflow vulnerability that allows remote attackers to execute arbitrary code by crafting a malicious WAV file with oversized payload. Attackers can leverage a specially crafted exploit file with shellcode, SEH bypass, and egghunter technique to achieve remote code execution on vulnerable Windows systems.

Affected products

Published 2026-01-29. Last modified 2026-06-17.