CVE-2020-7860 — HIGH (7.8) — White Hats Nepal

Q: How severe is CVE-2020-7860?

CVE-2020-7860 has been rated HIGH with a CVSS base score of 7.8/10. Review the CVSS metrics above for detailed severity breakdown.

Q: Is there a patch for CVE-2020-7860?

Check the references section above for vendor advisories and patch information. Affected products include: Unegg Project Unegg, Linux Linux Kernel.

Vulnerability Description

UnEGG v0.5 and eariler versions have a Integer overflow vulnerability, triggered when the user opens a malformed specific file that is mishandled by UnEGG. Attackers could exploit this and arbitrary code execution. This issue affects: Estsoft UnEGG 0.5 versions prior to 1.0 on linux.

CVSS Score

7.8

HIGH

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality

HIGH

Integrity

HIGH

Availability

HIGH

Affected Products

Vendor	Product	Versions
Unegg Project	Unegg	>= 0.5, < 1.0
Linux	Linux Kernel	-

Related Weaknesses (CWE)

CWE-190

References

https://www.altools.co.kr/Download/ALZip.aspxThird Party Advisory
https://www.altools.co.kr/Download/ALZip.aspxThird Party Advisory

FAQ

What is CVE-2020-7860?

CVE-2020-7860 is a vulnerability with a CVSS score of 7.8 (HIGH). UnEGG v0.5 and eariler versions have a Integer overflow vulnerability, triggered when the user opens a malformed specific file that is mishandled by UnEGG. Attackers could exploit this and arbitrary c...

How severe is CVE-2020-7860?

CVE-2020-7860 has been rated HIGH with a CVSS base score of 7.8/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2020-7860?

Check the references section above for vendor advisories and patch information. Affected products include: Unegg Project Unegg, Linux Linux Kernel.