CVE-2020-37036: Mini-Stream Software Rm Downloader

High severity, CVSS 8.4. EPSS: 0.2% chance of exploitation in the next 30 days.

RM Downloader 2.50.60 contains a local buffer overflow vulnerability in the 'Load' parameter that allows attackers to execute arbitrary code by overwriting memory. Attackers can craft a malicious payload with an egg hunter technique to bypass memory protections and execute commands like launching calc.exe.

Affected products

• Mini-Stream Software Rm Downloader: version 2.50.60 2006.06.23 only

Published 2026-01-30. Last modified 2026-06-17.