CVE-2020-8896 MEDIUM

CVE-2020-8896: Buffer Overflow in Google Earth Pro

Vendor Google Llc
Product Google Earth Pro
Weakness CWE-119
Published May 4, 2020
Last update August 4, 2024

CVSS base score

4.2/10
Attack vector Adjacent
Attack complexity High
Privileges required None
User interaction None
Confidentiality Low
Integrity None

CVSS vector

CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:L

What the vulnerability does

01Description

A Buffer Overflow vulnerability in the khcrypt implementation in Google Earth Pro versions up to and including 7.3.2 allows an attacker to perform a Man-in-the-Middle attack using a specially crafted key to read data past the end of the buffer used to hold it. Mitigation: Update to Google Earth Pro 7.3.3.

Key dates

02Disclosure timeline

May 4, 2020 CVE published
August 4, 2024 Record updated