Skip to content
OpenAdvisories
Medium · 4.2 CVE-2020-8896 EUVD-2020-29737GHSA-33rh-fh49-758p

Buffer Overflow in Google Earth Pro

Published May 4, 2020 · Updated Aug 4, 2024 · Assigned by Google

Description

A Buffer Overflow vulnerability in the khcrypt implementation in Google Earth Pro versions up to and including 7.3.2 allows an attacker to perform a Man-in-the-Middle attack using a specially crafted key to read data past the end of the buffer used to hold it. Mitigation: Update to Google Earth Pro 7.3.3.

Affected products

VendorProductAffectedFixed
Google Google Earth Pro stable – ≤ 7.3.2 —

References