Skip to content
OpenAdvisories
High · 8.0 CVE-2020-7877 EUVD-2020-28809GHSA-4p59-rrxq-mw63

ZOOK solution(remote administration tool) buffer overflow vulnerability

Published Sep 7, 2021 · Updated Aug 4, 2024 · Assigned by krcert

Description

A buffer overflow issue was discovered in ZOOK solution(remote administration tool) through processing 'ConnectMe' command while parsing a crafted OUTERIP value because of missing boundary check. This vulnerability allows the attacker to execute remote arbitrary command.

Affected products

VendorProductAffectedFixed
mastersoft ZOOKViewer_Setup.exe 2.0.4.6 – ≤ 2.0.4.6 —
mastersoft ZOOKAgentSetup.exe 2.0.6.1 – ≤ 2.0.6.1 —

References