4.2
Medium
CVE-2020-8896 A Buffer Overflow vulnerability in the khcrypt implementation in Google Earth Pro versions up to and including 7.3.2…
Description
A Buffer Overflow vulnerability in the khcrypt implementation in Google Earth Pro versions up to and including 7.3.2 allows an attacker to perform a Man-in-the-Middle attack using a specially crafted key to read data past the end of the buffer used to hold it. Mitigation: Update to Google Earth Pro 7.3.3.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Google Earth Pro 7.3 | earliest → 7.3.2 | No fix stated |