CVE-2020-8895

Description

Untrusted Search Path vulnerability in the windows installer of Google Earth Pro versions prior to 7.3.3 allows an attacker to insert malicious local files to execute unauthenticated remote code on the targeted system.

Risk Information

Base Score

7.8

MODERATE

Vector

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

EPSS Score

Exploitation Probability

0.02

Associated Vulnerability

Vulnerability	OS Platform
Vulnerabilities CVE-2020-8895,CVE-2020-8896 are affected in Google Earth Pro (x64) 7.3.2	Windows
Vulnerabilities CVE-2020-8895,CVE-2020-8896 are affected in Google Earth Pro 7.3.2	Windows

Patch Details

No records found

References

https://nvd.nist.gov/vuln/detail/CVE-2023-1234
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1234