CVE-2020-24397

CVE-2020-24397 affects Zoho ManageEngine Desktop Central 10.0.0.SP-534 (client side). The issue is an integer overflow in InternetSendRequestEx and InternetSendRequestByBitrate that leads to a heap-based buffer overflow and remote code execution with SYSTEM privileges. Red Hat and other sources c...