Description (CNA)
AnyDesk before 8.0.3 allows unauthenticated remote attackers to execute arbitrary code via a heap-based buffer overflow, as demonstrated on Linux for command execution as root without the victim approving desktop control. In the stream packet handler for mode 5 in the session protocol, a payload length value is not validated.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| AnyDesk / AnyDesk | affected 8.0.0 before 8.0.3 |
CWE
CWE-130
References
ADP enrichment
No English description supplied.