Description (CNA)
The vulnerability function is enabled when the streamer service related to the AfreecaTV communicated through web socket using 21201 port. A stack-based buffer overflow leading to remote code execution was discovered in strcpy() operate by "FanTicket" field. It is because of stored data without validation of length.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| AfreecaTV / afreecatvstreamer.exe | affected 1.0.0.1 through 2020.06.15 |
CWE
CWE-190
References
ADP enrichment
No English description supplied.