CVE-2020-37215

Publication date

2026-02-11 20:37:33

Family

VulnCheck

State

PUBLISHED

Description

MSN Password Recovery version 1.30 contains a denial of service vulnerability that allows attackers to crash the application by supplying an oversized input in the registration code field. Attackers can generate a 9000-byte buffer of repeated characters and paste it into the User Name and Registration Code field to trigger an application crash.