CVE-2020-7877

Summary

A buffer overflow issue was discovered in ZOOK solution(remote administration tool) through processing 'ConnectMe' command while parsing a crafted OUTERIP value because of missing boundary check. This vulnerability allows the attacker to execute remote arbitrary command.

Affected Software

VendorProductVersion RangeStatus
mastersoftZOOKViewer_Setup.exe2.0.4.6 <= 2.0.4.6affected
mastersoftZOOKAgentSetup.exe2.0.6.1 <= 2.0.6.1affected

Weaknesses

  • CWE-120: CWE-120 Buffer Overflow

ADP Enrichment

CVE Program Container

Additional References

References