Threat Investigation
Request a demo

CVE-2020-7860

High

Description

UnEGG v0.5 and eariler versions have a Integer overflow vulnerability, triggered when the user opens a malformed specific file that is mishandled by UnEGG. Attackers could exploit this and arbitrary code execution. This issue affects: Estsoft UnEGG 0.5 versions prior to 1.0 on linux.

SeverityHigh
CVSS7.8
Exploit probability—
ProductUnegg
PublishedJun 11, 2021
First seenJun 11, 2021
Weakness typeCWE-190Integer overflow

How to fix

Update
  • unegg_project unegg1.0 or later

Affected products

ProductAffected versionsFixed in
unegg_project unegg0.5 ≤ v < 1.01.0

Check your version

Choose the product and enter the version you run to see whether it falls in the affected range.

In the Intelligence 360 plan

Attack Surface Management

See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.