Skip to content
OpenAdvisories
High · 7.8 CVE-2020-7860 EUVD-2020-28792GHSA-wcv3-6q72-gcx7

UnEGG v0.5 and eariler versions have a Integer overflow vulnerability, triggered when the user opens a malformed specific file that is mish…

Published Jun 11, 2021 · Updated Sep 16, 2024 · Assigned by krcert

Description

UnEGG v0.5 and eariler versions have a Integer overflow vulnerability, triggered when the user opens a malformed specific file that is mishandled by UnEGG. Attackers could exploit this and arbitrary code execution. This issue affects: Estsoft UnEGG 0.5 versions prior to 1.0 on linux.

Affected products

VendorProductAffectedFixed
Estsoft UnEGG 0.5 – < 1.0 1.0

References