Google: >> Earth >> 7.1.2.2041 Security Vulnerabilities
A Buffer Overflow vulnerability in the khcrypt implementation in Google Earth Pro versions up to and including 7.3.2 allows an attacker to perform a Man-in-the-Middle attack using a specially crafted key to read data past the end of the buffer used to hold it. Mitigation: Update to Google Earth Pro 7.3.3.
CVSS Score
4.2
EPSS Score
0.001
Published
2020-05-04
Untrusted Search Path vulnerability in the windows installer of Google Earth Pro versions prior to 7.3.3 allows an attacker to insert malicious local files to execute unauthenticated remote code on the targeted system.
CVSS Score
7.8
EPSS Score
0.0
Published
2020-04-21