CVE-2020-24397: Integer Overflow or Wraparound

An issue was discovered in the client side of Zoho ManageEngine Desktop Central 10.0.0.SP-534. An attacker-controlled server can trigger an integer overflow in InternetSendRequestEx and InternetSendRequestByBitrate that leads to a heap-based buffer overflow and Remote Code Execution with SYSTEM...

PT-2020-15728

Name of the Vulnerable Software and Affected Versions Zoho ManageEngine Desktop Central version 10.0.0.SP-534 Description An issue in the client side of the software allows an attacker-controlled server to trigger an integer overflow in InternetSendRequestEx and InternetSendRequestByBitrate...

CVE-2020-15589: Undefined Security Weakness

A design issue was discovered in GetInternetRequestHandle, InternetSendRequestEx and InternetSendRequestByBitrate in the client side of Zoho ManageEngine Desktop Central 10.0.552.W and Remote Access Plus before 10.1.2119.1. By exploiting this issue, an attacker-controlled server can force the...

PT-2020-14514

Name of the Vulnerable Software and Affected Versions Zoho ManageEngine Desktop Central version 10.0.552.W Description An issue in the client side of the software allows an attacker-controlled server to trigger an integer overflow in InternetSendRequestEx and InternetSendRequestByBitrate, leading...