CVE-2020-8896 is a vulnerability in Google Earth
Published on May 4, 2020
Buffer Overflow in Google Earth Pro
A Buffer Overflow vulnerability in the khcrypt implementation in Google Earth Pro versions up to and including 7.3.2 allows an attacker to perform a Man-in-the-Middle attack using a specially crafted key to read data past the end of the buffer used to hold it. Mitigation: Update to Google Earth Pro 7.3.3.
Vulnerability Analysis
Weakness Type
What is a Buffer Overflow Vulnerability?
The software performs operations on a memory buffer, but it can read from or write to a memory location that is outside of the intended boundary of the buffer.
CVE-2020-8896 has been classified to as a Buffer Overflow vulnerability or weakness.
Products Associated with CVE-2020-8896
Want to know whenever a new CVE is published for Google Earth? stack.watch will email you.
Affected Versions
Google LLC Google Earth Pro:- Version stable, <= 7.3.2 is affected.
Exploit Probability
EPSS (Exploit Prediction Scoring System) scores estimate the probability that a vulnerability will be exploited in the wild within the next 30 days. The percentile shows you how this score compares to all other vulnerabilities.