Detections
Analytics
CVE-2020-24397
high
Description
An issue was discovered in the client side of Zoho ManageEngine Desktop Central 10.0.0.SP-534. An attacker-controlled server can trigger an integer overflow in InternetSendRequestEx and InternetSendRequestByBitrate that leads to a heap-based buffer overflow and Remote Code Execution with SYSTEM privileges.
References
https://www.manageengine.com/products/desktop-central/integer-overflow-vulnerability.html