FortiClient VulnerabilityManageEngine Desktop Central CVE-2020-24397 Buffer Overflow Vulnerability
Description
An issue was discovered in the client side of Zoho ManageEngine Desktop Central 10.0.0.SP-534. An attacker-controlled server can trigger an integer overflow in InternetSendRequestEx and InternetSendRequestByBitrate that leads to a heap-based buffer overflow and Remote Code Execution with SYSTEM privileges.
Affected Applications
ManageEngine Desktop Central
CVE References
CVE-2020-24397| ID | 71033 |
| Created | Feb 10, 2022 |
| Description Updated |
Dec 18, 2023 |
| Risk |
|
| Coverage | FortiClient |
| OS | Windows |
| Vendor | Zoho |
| Patch | manual |
| Application | ManageEngine Desktop Central |