2 lines
3.4 KiB
JSON
2 lines
3.4 KiB
JSON
{"affected":[{"affectedData":[{"product":"MX Player Android App","vendor":"n/a","versions":[{"status":"affected","version":"All versions prior to version v1.24.5"}]}],"source":"vulnreport@tenable.com"}],"configurations":[{"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:a:mxplayer:mx_player:*:*:*:*:*:android:*:*","matchCriteriaId":"C8E9A810-2BAB-4A92-A231-121D804C88C2","versionEndExcluding":"1.24.5","vulnerable":true}],"negate":false,"operator":"OR"}]}],"cveTags":[],"descriptions":[{"lang":"en","value":"MX Player Android App versions prior to v1.24.5, are vulnerable to a directory traversal vulnerability when user is using the MX Transfer feature in \"Receive\" mode. An attacker can exploit this by connecting to the MX Transfer session as a \"sender\" and sending a MessageType of \"FILE_LIST\" with a \"name\" field containing directory traversal characters (../). This will result in the file being transferred to the victim's phone, but being saved outside of the intended \"/sdcard/MXshare\" directory. In some instances, an attacker can achieve remote code execution by writing \".odex\" and \".vdex\" files in the \"oat\" directory of the MX Player application."},{"lang":"es","value":"Las versiones de MX Player Android App anteriores a v1.24.5, son susceptibles a una vulnerabilidad de salto de directorio cuando un usuario está usando la funcionalidad MX Transfer en modo \"Receive\". Un atacante puede explotar esto al conectarse a la sesión de MX Transfer como \"sender\" y enviando un MessageType de \"FILE_LIST\" con un campo \"name\" que contiene caracteres de salto de directorio (../). Esto resultará en que el archivo es transferido hacia el teléfono de la víctima, pero siendo guardado fuera del directorio previsto \"/sdcard /MXshare\". En algunas instancias, un atacante puede lograr una ejecución de código remota al escribir archivos \".odex\" y \".vdex\" en el directorio \"oat\" de la aplicación MX Player"}],"id":"CVE-2020-5764","lastModified":"2026-06-17T03:22:11.533","metrics":{"cvssMetricV2":[{"acInsufInfo":false,"baseSeverity":"MEDIUM","cvssData":{"accessComplexity":"LOW","accessVector":"ADJACENT_NETWORK","authentication":"NONE","availabilityImpact":"PARTIAL","baseScore":5.8,"confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","vectorString":"AV:A/AC:L/Au:N/C:P/I:P/A:P","version":"2.0"},"exploitabilityScore":6.5,"impactScore":6.4,"obtainAllPrivilege":false,"obtainOtherPrivilege":false,"obtainUserPrivilege":false,"source":"nvd@nist.gov","type":"Primary","userInteractionRequired":false}],"cvssMetricV31":[{"cvssData":{"attackComplexity":"LOW","attackVector":"ADJACENT_NETWORK","availabilityImpact":"HIGH","baseScore":8.8,"baseSeverity":"HIGH","confidentialityImpact":"HIGH","integrityImpact":"HIGH","privilegesRequired":"NONE","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","version":"3.1"},"exploitabilityScore":2.8,"impactScore":5.9,"source":"nvd@nist.gov","type":"Primary"}]},"published":"2020-07-08T14:15:10.477","references":[{"source":"vulnreport@tenable.com","tags":["Exploit","Third Party Advisory"],"url":"https://www.tenable.com/security/research/tra-2020-41"},{"source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Third Party Advisory"],"url":"https://www.tenable.com/security/research/tra-2020-41"}],"sourceIdentifier":"vulnreport@tenable.com","vulnStatus":"Modified","weaknesses":[{"description":[{"lang":"en","value":"CWE-22"}],"source":"nvd@nist.gov","type":"Primary"}]}
|