Vulnerability CVE-2020-7949

Vulnerability CVE-2020-7949

Published: 2020-01-27

Description:

schemasystem.dll in Valve Dota 2 before 7.23f allows remote attackers to achieve code execution or denial of service by creating a gaming server and inviting a victim to this server, because a crafted map is mishandled during a GetValue call.

See advisories in our WLB2 database:

	Topic	Author	Date
Med.	Dota 2 7.23f Denial of Service	Bogdan Kurinnoy	10.02.2020

Type:

NVD-CWE-noinfo

CVSS2 => (AV:N/AC:M/Au:N/C:P/I:P/A:P)

CVSS Base Score	Impact Subscore	Exploitability Subscore
6.8/10	6.4/10	8.6/10

Exploit range	Attack complexity	Authentication
Remote	Medium	No required
Confidentiality impact	Integrity impact	Availability impact
Partial	Partial	Partial

Affected software
Valvesoftware -> Dota 2

References:

https://github.com/bi7s/CVE/tree/master/CVE-2020-7949

Copyright 2024, cxsecurity.com