PT-2020-19871 · Valve · Dota 2

Published 2020-01-27 · Updated 2020-01-29 · CVE-2020-7952

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Valve Dota 2 versions prior to 7.23f

Description The issue allows remote attackers to achieve code execution or denial of service by creating a gaming server and inviting a victim to this server. This is due to a crafted map being affected by memory corruption in the rendersystemdx9.dll component.

Recommendations For versions prior to 7.23f, update to version 7.23f or later to resolve the issue.

Exploit

Fix

Related Identifiers

CVE-2020-7952

Affected Products

Dota 2

References · 4

• 🔥 https://github.com/bi7s/CVE/tree/master/CVE-2020-7952 · Exploit
• https://osv.dev/vulnerability/CVE-2020-7952 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2020-7952 · Security Note
• https://t.me/cvenotify/464 · Telegram Post