CVE-2020-28967

FlashGet v1.9.6 was discovered to contain a buffer overflow in the 'current path directory' function. This vulnerability allows attackers to elevate local process privileges via overwriting the registers.

CVSS v3.1

8.8 HIGHCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

CVSS v2.0

9.0 HIGHAV:N/AC:L/Au:S/C:C/I:C/A:C

EPSS

8.89% chance of exploitation in the next 30 days, 95th percentile

Published

2021-10-22

Updated

2024-08-04

Proof-of-concept exploits (1)

• https://www.vulnerability-lab.com/get_content.php?id=2248

References

• CVE Record
• NVD entry

Related

• CVE-2020-28964
• CVE-2020-28968
• CVE-2020-28963
• CVE-2020-28974
• CVE-2020-28961
• CVE-2020-28975