CVE-2020-7881 — AfreecaTV streamer service stack-based buffer overflow
The vulnerability function is enabled when the streamer service related to the AfreecaTV communicated through web socket using 21201 port. A stack-based buffer overflow leading …
Published: 2021-11-26 · CVSS: 7.5 · CVSS 3.1
The vulnerability function is enabled when the streamer service related to the AfreecaTV communicated through web socket using 21201 port. A stack-based buffer overflow leading to remote code execution was discovered in strcpy() operate by "FanTicket" field. It is because of stored data without validation of length.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7