PT-2021-11614 · Flashget · Flashget

Published 2021-10-22 · Updated 2021-10-28 · CVE-2020-28967

Positive Technologies (AI Summary)

CVSS v2.0

9.0

High

Base vector

AV:N/AC:L/Au:S/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions: FlashGet version 1.9.6

Description: A buffer overflow was discovered in the current path directory function, allowing attackers to elevate local process privileges by overwriting the registers.

Recommendations: For FlashGet version 1.9.6, consider restricting access to the current path directory function until a patch is available. As a temporary workaround, avoid using the vulnerable function to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Buffer Overflow

Weakness Enumeration

CWE-120

Related Identifiers

CVE-2020-28967

Affected Products

Flashget

References · 3

• 🔥 https://vulnerability-lab.com/get_content.php?id=2248 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2020-28967 · Security Note
• https://osv.dev/vulnerability/CVE-2020-28967 · Vendor Advisory