CVE-2020-37170: TapinRadio DoS Vulnerability

CVE-2020-37170 Overview

TapinRadio 2.12.3 contains a denial of service vulnerability in the application proxy address configuration that allows local attackers to crash the application. Attackers can overwrite the address field with 3000 bytes of arbitrary data to trigger an application crash and prevent normal program functionality. This vulnerability is classified as CWE-120 (Buffer Copy without Checking Size of Input), commonly known as a classic buffer overflow.

Critical Impact

Local attackers can exploit this buffer overflow vulnerability to crash TapinRadio, causing denial of service and disrupting application availability for users.

Affected Products

• TapinRadio version 2.12.3
• Raimersoft TapinRadio (Windows desktop application)

Discovery Timeline

• 2026-02-07 - CVE CVE-2020-37170 published to NVD
• 2026-02-09 - Last updated in NVD database

Technical Details for CVE-2020-37170

Vulnerability Analysis

This vulnerability stems from improper input validation in TapinRadio's proxy address configuration functionality. The application fails to properly validate the size of user-supplied input before copying it into a fixed-size memory buffer. When a user or attacker supplies an excessively long string (approximately 3000 bytes) to the proxy address field, the application attempts to process this oversized input without adequate boundary checks.

The lack of proper bounds checking results in memory corruption that causes the application to crash. While this vulnerability requires local access and user interaction to exploit, it effectively renders the application unusable until restarted, constituting a denial of service condition.

Root Cause

The root cause is a classic buffer overflow (CWE-120) where the application copies user-controlled data into a buffer without verifying that the input size does not exceed the buffer's allocated capacity. The proxy address input field accepts data that exceeds the expected maximum length, and the underlying buffer handling code does not implement proper size validation before the copy operation occurs.

Attack Vector

The attack vector is local, requiring the attacker to have access to the system where TapinRadio is installed. The exploitation process involves:

1. Accessing the TapinRadio application's proxy configuration settings
2. Entering approximately 3000 bytes of arbitrary data into the proxy address field
3. Triggering the configuration save or apply action
4. The application crashes due to buffer overflow, causing denial of service

The vulnerability does not enable arbitrary code execution in this context, but it reliably crashes the application, preventing legitimate use. Technical details and proof-of-concept information can be found in the Exploit-DB #48011 advisory.

Detection Methods for CVE-2020-37170

Indicators of Compromise

• Unexpected TapinRadio application crashes occurring during proxy configuration changes
• Windows Event Log entries showing application faults in TapinRadio.exe with access violation or memory corruption error codes
• Proxy configuration files containing abnormally long address strings (greater than 2000 characters)

Detection Strategies

• Monitor Windows application crash reports for TapinRadio.exe failures with memory-related exception codes
• Implement endpoint detection rules to alert on repeated application crashes within short time windows
• Review application configuration files for anomalous data lengths that exceed normal parameter values

Monitoring Recommendations

• Enable SentinelOne endpoint protection with application crash monitoring capabilities
• Configure process monitoring to detect and log TapinRadio application termination events
• Set up alerts for users experiencing repeated application failures that may indicate exploitation attempts

How to Mitigate CVE-2020-37170

Immediate Actions Required

• Verify installed TapinRadio version and identify systems running version 2.12.3
• Restrict proxy configuration access to trusted administrators where possible
• Consider upgrading to a newer version of TapinRadio if available from Raimersoft
• Implement endpoint protection to monitor for application crash patterns

Patch Information

Consult the official Raimersoft website for updated versions of TapinRadio that may address this vulnerability. The VulnCheck Advisory for TapinRadio provides additional remediation guidance. No specific vendor patch has been confirmed in the available CVE data.

Workarounds

• Limit local access to systems with TapinRadio installed to trusted users only
• Consider disabling or restricting proxy configuration functionality if not required for operation
• Deploy endpoint protection solutions like SentinelOne to detect and respond to exploitation attempts
• Monitor application stability and investigate any unexpected crashes as potential security incidents