PT-2020-19870 · Valve · Dota 2

Published 2020-01-27 · Updated 2021-07-21 · CVE-2020-7951

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Valve Dota 2 versions prior to 7.23e

Description The issue allows remote attackers to achieve code execution or denial of service by creating a gaming server and inviting a victim to this server. This is due to a crafted map being affected by memory corruption in the meshsystem.dll component.

Recommendations For versions prior to 7.23e, update to version 7.23e or later to resolve the issue.

Exploit

Fix

Memory Corruption

Weakness Enumeration

CWE-787

Related Identifiers

CVE-2020-7951

Affected Products

Dota 2

References · 4

• 🔥 https://github.com/bi7s/CVE/tree/master/CVE-2020-7951 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2020-7951 · Security Note
• https://osv.dev/vulnerability/CVE-2020-7951 · Vendor Advisory
• https://t.me/cvenotify/463 · Telegram Post