CVE-2020-7952: High severity Valvesoftware Dota 2 vulnerability
Published Jan 27, 2020
·Updated
rendersystemdx9.dll in Valve Dota 2 before 7.23f allows remote attackers to achieve code execution or denial of service by creating a gaming server and inviting a victim to this server, because a crafted map is affected by memory corruption.
Affected Software
1 affected component
Valvesoftware Dota 2<7.23f
Event History
Jan 27, 2020
CVE Published
via MITRE·04:33 PM
Data Sourced
via MITRE·04:33 PM
Description
Data Sourced
via NVD·05:15 PM
DescriptionSeverityAffected Software
Frequently Asked Questions
1
What is CVE-2020-7952?
CVE-2020-7952 is a vulnerability in Valve Dota 2 before 7.23f that allows remote attackers to achieve code execution or denial of service.
2
How does CVE-2020-7952 work?
CVE-2020-7952 works by creating a gaming server and inviting a victim to this server, where a crafted map is affected by memory corruption.
3
How severe is CVE-2020-7952?
CVE-2020-7952 has a severity rating of 7.8 (high).
4
What software is affected by CVE-2020-7952?
Valve Dota 2 versions up to and excluding 7.23f are affected by CVE-2020-7952.
5
How can I mitigate CVE-2020-7952?
You can mitigate CVE-2020-7952 by updating Valve Dota 2 to version 7.23f or later.