CVE-2020-13160 – AnyDesk 5.5.2 - Remote Code Execution

https://notcve.org/view.php?id=CVE-2020-13160

AnyDesk before 5.5.3 on Linux and FreeBSD has a format string vulnerability that can be exploited for remote code execution. AnyDesk versiones anteriores a 5.5.3 en Linux y FreeBSD presenta una vulnerabilidad de cadena de formato que puede ser explotada para una ejecución de código remota AnyDesk version 5.5.2 suffers from a remote code execution vulnerability. • https://www.exploit-db.com/exploits/49613 http://packetstormsecurity.com/files/158291/AnyDesk-GUI-Format-String-Write.html http://packetstormsecurity.com/files/161628/AnyDesk-5.5.2-Remote-Code-Execution.html https://devel0pment.de/?p=1881 https://download.anydesk.com/changelog.txt - • CWE-134: Use of Externally-Controlled Format String •