Description
A flaw in Trading Technologies Messaging 7.1.28.3 (ttmd.exe) relates to invalid parameter handling when calling strcpy_s() with an invalid parameter (i.e., a long src string parameter) as a part of processing a type 4 message sent to default TCP RequestPort 10200. It's been observed that ttmd.exe terminates as a result.
Analysis and contextual insights are available on OpenCVE Cloud.
Remediation
No vendor fix or workaround currently provided.
Additional remediation guidance may be available on OpenCVE Cloud.
Tracking
Sign in to view the affected projects.
Advisories
| Source | ID | Title |
|---|---|---|
EUVD |
EUVD-2020-26936 | A flaw in Trading Technologies Messaging 7.1.28.3 (ttmd.exe) relates to invalid parameter handling when calling strcpy_s() with an invalid parameter (i.e., a long src string parameter) as a part of processing a type 4 message sent to default TCP RequestPort 10200. It's been observed that ttmd.exe terminates as a result. |
References
| Link | Providers |
|---|---|
| https://www.tenable.com/security/research/tra-2020-52 |
|
History
No history.
Status: PUBLISHED
Assigner: tenable
Published:
Updated: 2024-08-04T08:39:25.915Z
Reserved: 2020-01-06T00:00:00.000Z
Link: CVE-2020-5779
No data.
Status : Modified
Published: 2020-09-02T20:15:10.953
Modified: 2024-11-21T05:34:35.143
Link: CVE-2020-5779
No data.
OpenCVE Enrichment
No data.
Weaknesses
EUVD