CVE-2020-37201: Nsasoft NetShareWatcher buffer overflow in registration name input

Executive brief

NetShareWatcher, a tool used for monitoring network shares, contains a vulnerability in its registration system. An attacker can cause the application to crash by entering an excessively long name into the registration field. This results in a denial-of-service, preventing legitimate users from using the software.

Technical details

A classic buffer overflow (CWE-120) exists in NetShareWatcher version 1.5.8.0 within the 'Enter Registration Code' dialog. The application fails to properly validate the length of the input provided in the 'Name' field. An attacker can trigger this vulnerability by pasting a payload of approximately 1,000 characters into the field, leading to memory corruption and an application crash (Denial of Service). While some sources suggest a local attack vector requiring user interaction, others indicate it can be triggered via network-based delivery of the payload. A public Proof of Concept (PoC) exploit is available.

Affected products

• Nsasoft (Nsauditor) NetShareWatcher 1.5.8.0

Timeline

• 2020-01-06: disclosed: Initial exploit code published to Exploit-DB
• 2026-02-11: advisory: NVD/VulnCheck advisory published

References

• http://www.nsauditor.com/
• https://www.exploit-db.com/exploits/47848
• https://www.vulncheck.com/advisories/netsharewatcher-name-denial-of-service