Description
The vulnerability function is enabled when the streamer service related to the AfreecaTV communicated through web socket using 21201 port. A stack-based buffer overflow leading to remote code execution was discovered in strcpy() operate by "FanTicket" field. It is because of stored data without validation of length.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| AfreecaTV | afreecatvstreamer.exe | 1.0.0.1 – ≤ 2020.06.15 | — |