CVE-2020-7949: High severity Valvesoftware Dota 2 vulnerability
Published Jan 27, 2020
·Updated
schemasystem.dll in Valve Dota 2 before 7.23f allows remote attackers to achieve code execution or denial of service by creating a gaming server and inviting a victim to this server, because a crafted map is mishandled during a GetValue call.
Affected Software
1 affected component
Valvesoftware Dota 2<7.23f
Event History
Jan 27, 2020
CVE Published
via MITRE·04:40 PM
Data Sourced
via MITRE·04:40 PM
Description
Data Sourced
via NVD·05:15 PM
DescriptionSeverityAffected Software
Frequently Asked Questions
1
What is CVE-2020-7949?
CVE-2020-7949 is a vulnerability in Valve Dota 2 before version 7.23f that allows remote attackers to achieve code execution or denial of service.
2
How can CVE-2020-7949 be exploited?
CVE-2020-7949 can be exploited by creating a gaming server and inviting a victim to join, where a crafted map is mishandled during a GetValue call.
3
What is the severity of CVE-2020-7949?
The severity of CVE-2020-7949 is high, with a CVSS score of 7.8.
4
Which version of Valve Dota 2 is affected by CVE-2020-7949?
Valve Dota 2 before version 7.23f is affected by CVE-2020-7949.
5
Is there a fix available for CVE-2020-7949?
Yes, updating Valve Dota 2 to version 7.23f or newer will fix the vulnerability.