CVE-2020-5779

2020-09-0219:21:29

tenable

www.cve.org

0.001 Low

EPSS

Percentile

42.6%

JSON

A flaw in Trading Technologies Messaging 7.1.28.3 (ttmd.exe) relates to invalid parameter handling when calling strcpy_s() with an invalid parameter (i.e., a long src string parameter) as a part of processing a type 4 message sent to default TCP RequestPort 10200. It’s been observed that ttmd.exe terminates as a result.

CNA Affected

[
  {
    "product": "Trading Technologies Messaging",
    "vendor": "n/a",
    "versions": [
      {
        "status": "affected",
        "version": "Trading Technologies Messaging 7.1.28.3"
      }
    ]
  }
]

References

www.tenable.com/security/research/tra-2020-52

0.001 Low

EPSS

Percentile

42.6%

JSON

Related for CVELIST:CVE-2020-5779