CVE-2020-7881CWE-190

AfreecaTV streamer service stack-based buffer overflow

High · published November 26, 2021

CVSS v3.1
7.5
EPSS
1%
Percentile
73.0
In the wild
Unconfirmed
What it is

The vulnerability function is enabled when the streamer service related to the AfreecaTV communicated through web socket using 21201 port. A stack-based buffer overflow leading to remote code execution was discovered in strcpy() operate by "FanTicket" field. It is because of stored data without validation of length.

The record
Technical detail
CVSS v3.1
7.5 · HIGH
Vector
CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.01440 · 73.0th percentile
Weakness
CWE-190 · Integer Overflow or Wraparound
Published
2021-11-26T16:29Z
EPSS history
Timeline
  • 26 NOV 16:29Z
    AfreecaTV streamer service stack-based buffer overflow
    cvelistv5