{"id":"CVE-2020-8895","state":"PUBLISHED","title":"DLL Hijacking in Google Earth Pro Windows installer","description":"Untrusted Search Path vulnerability in the windows installer of Google Earth Pro versions prior to 7.3.3 allows an attacker to insert malicious local files to execute unauthenticated remote code on the targeted system.","publishedAt":"2020-04-21T17:50:11.000Z","updatedAt":"2024-08-04T10:12:11.060Z","severity":{"score":7.8,"label":"High","version":"3.1","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","source":"Google"},"assigner":"Google","products":["Google Earth Pro"],"affected":[{"vendor":"Google","product":"Earth Pro","versions":[{"version":"unspecified","status":"affected","lessThan":"7.3.3","versionType":"custom"}],"platforms":["Windows"]}],"references":["https://support.google.com/earth/answer/40901?hl=en"],"weaknesses":["CWE-427"],"ingestedAt":"2026-10-29T19:47:44.297Z","source":{"repository":"CVEProject/cvelistV5","path":"cves/2020/8xxx/CVE-2020-8895.json","commit":"556c9d3a8cd17e218bb8e452ba7cd619a384ff47"},"raw":{"dataType":"CVE_RECORD","dataVersion":"5.1","cveMetadata":{"cveId":"CVE-2020-8895","state":"PUBLISHED","datePublished":"2020-04-21T17:50:11.000Z","dateUpdated":"2024-08-04T10:12:11.060Z","assignerShortName":"Google","assignerOrgId":"14ed7db2-1595-443d-9d34-6215bf890778","dateReserved":"2020-02-12T00:00:00.000Z"},"containers":{"cna":{"title":"DLL Hijacking in Google Earth Pro Windows installer","descriptions":[{"lang":"en","value":"Untrusted Search Path vulnerability in the windows installer of Google Earth Pro versions prior to 7.3.3 allows an attacker to insert malicious local files to execute unauthenticated remote code on the targeted system."}],"affected":[{"vendor":"Google","product":"Earth Pro","versions":[{"version":"unspecified","status":"affected","lessThan":"7.3.3","versionType":"custom"}],"platforms":["Windows"]}],"references":[{"url":"https://support.google.com/earth/answer/40901?hl=en","tags":["x_refsource_MISC"]}],"metrics":[{"cvssV3_1":{"attackComplexity":"LOW","attackVector":"LOCAL","availabilityImpact":"HIGH","baseScore":7.8,"baseSeverity":"HIGH","confidentialityImpact":"HIGH","integrityImpact":"HIGH","privilegesRequired":"NONE","scope":"UNCHANGED","userInteraction":"REQUIRED","vectorString":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","version":"3.1"}}],"problemTypes":[{"descriptions":[{"cweId":"CWE-427","description":"CWE-427 Uncontrolled Search Path Element","lang":"en","type":"CWE"}]},{"descriptions":[{"description":"DLL Hijacking","lang":"en","type":"text"}]}],"providerMetadata":{"shortName":"Google","dateUpdated":"2020-05-04T20:07:40.000Z","orgId":"14ed7db2-1595-443d-9d34-6215bf890778"},"credits":[{"lang":"en","value":"Daniel Díez Tainta"}],"solutions":[{"lang":"en","value":"Recommended to update to Google Earth Pro 7.3.3 at your earliest convenience."}],"source":{"discovery":"EXTERNAL"},"x_generator":{"engine":"Vulnogram 0.0.9"},"x_legacyV4Record":{"CVE_data_meta":{"ASSIGNER":"security@google.com","ID":"CVE-2020-8895","STATE":"PUBLIC","TITLE":"DLL Hijacking in Google Earth Pro Windows installer"},"affects":{"vendor":{"vendor_data":[{"product":{"product_data":[{"product_name":"Earth Pro","version":{"version_data":[{"platform":"Windows","version_affected":"<","version_value":"7.3.3"}]}}]},"vendor_name":"Google"}]}},"credit":[{"lang":"eng","value":"Daniel Díez Tainta"}],"data_format":"MITRE","data_type":"CVE","data_version":"4.0","description":{"description_data":[{"lang":"eng","value":"Untrusted Search Path vulnerability in the windows installer of Google Earth Pro versions prior to 7.3.3 allows an attacker to insert malicious local files to execute unauthenticated remote code on the targeted system."}]},"generator":{"engine":"Vulnogram 0.0.9"},"impact":{"cvss":[{"attackComplexity":"LOW","attackVector":"LOCAL","availabilityImpact":"HIGH","baseScore":7.8,"baseSeverity":"HIGH","confidentialityImpact":"HIGH","integrityImpact":"HIGH","privilegesRequired":"NONE","scope":"UNCHANGED","userInteraction":"REQUIRED","vectorString":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","version":"3.1"}]},"problemtype":{"problemtype_data":[{"description":[{"lang":"eng","value":"CWE-427 Uncontrolled Search Path Element"}]},{"description":[{"lang":"eng","value":"DLL Hijacking"}]}]},"references":{"reference_data":[{"name":"https://support.google.com/earth/answer/40901?hl=en","refsource":"MISC","url":"https://support.google.com/earth/answer/40901?hl=en"}]},"solution":[{"lang":"en","value":"Recommended to update to Google Earth Pro 7.3.3 at your earliest convenience."}],"source":{"discovery":"EXTERNAL"}}},"adp":[{"title":"CVE Program Container","references":[{"url":"https://support.google.com/earth/answer/40901?hl=en","tags":["x_refsource_MISC","x_transferred"]}],"providerMetadata":{"shortName":"CVE","orgId":"af854a3a-2127-422b-91ae-364da2661108","dateUpdated":"2024-08-04T10:12:11.060Z"}}]}}}