PT-2020-20357 · Google · Google Earth Pro

Published 2020-05-04 · Updated 2020-05-08 · CVE-2020-8896

Positive Technologies (AI Summary)

CVSS v3.1

5.9

Medium

Base vector

AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions Google Earth Pro versions up to and including 7.3.2

Description A Buffer Overflow issue in the khcrypt implementation allows an attacker to perform a Man-in-the-Middle attack using a specially crafted key to read data past the end of the buffer used to hold it.

Recommendations Update to Google Earth Pro 7.3.3.

Fix

Buffer Overflow

Weakness Enumeration

CWE-120

CWE-119

Related Identifiers

CVE-2020-8896

Affected Products

Google Earth Pro

References · 4

• https://osv.dev/vulnerability/CVE-2020-8896 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2020-8896 · Security Note
• https://support.google.com/earth/answer/40901 · Vendor Advisory
• https://t.me/cvenotify/3547 · Telegram Post