时间:2024-09-20 08:45:41 来源:网络整理编辑:百科
If you own a Dell laptop or desktop then there's a very good chance your machine is vulnerable to at
If you own a Dell laptop or desktop then there's a very good chance your machine is vulnerable to attack simply by visiting a malicious website. The good news is, Dell has released a patch to close the security hole.
As ZDNet reports, 17-year-old security researcher Bill Demirkapi discovered a vulnerability (CVE-2019-3719) in the Dell SupportAssist utility which allows an attacker to remote execute code. This is achieved by getting a user to visit a specific website containing JavaScript code capable of tricking the SupportAssist app into downloading and running malicious files (with full admin rights). Importantly, no user interaction is required once the website has been visited and the JavaScript can be hidden inside an ad on a legitimate website.
Here's the remote code execution in action as recorded by Demirkapi:
Dell uses SupportAssist to pro-actively check the health of your hardware and software and then automatically updates each system as necessary. As you've probably guessed, it's a piece of software that gets pre-installed on most new Dell systems, meaning there's a lot of users out there potentially vulnerable to this attack.
Dell has known about the vulnerability since Oct. 26 last year and a patched version of SupportAssist (v3.2.0.90) is now available which closes the security hole. If you own a Dell which has SupportAssist installed, download and install the new version as soon as possible to protect your system.
TopicsCybersecurityDell
Nancy Pelosi warns colleagues after info hacked2024-09-20 08:43
孫興慜4輪英超首發全部啞火 ,被換下還喋喋不休 首發位置恐不保2024-09-20 07:50
西甲情報:巴倫西亞VS馬德裏競技 ,馬競主力右後衛紅牌停賽2024-09-20 07:48
足壇悲喜夜!皇馬+2支爭冠隊狂飆 ,8.9億領頭羊翻車 ,梅西最倒黴2024-09-20 07:43
WhatsApp announces plans to share user data with Facebook2024-09-20 07:40
丟球背鍋成罪人+被換下場 !梅西被迫犧牲,大巴黎造星偏袒姆總2024-09-20 07:28
記者 :巴薩希望用德斯特與多特交換穆尼耶2024-09-20 07:12
進球率超過梅西,何塞盧殺老爺子!本澤馬秀場熱鬧 ,皇馬絕殺西班牙人2024-09-20 07:10
One of the most controversial power struggles in media comes to a close2024-09-20 06:53
米體:盧卡庫預計傷缺一周錯過德比,歐冠能否出戰拜仁成疑2024-09-20 06:52
Researchers create temporary tattoos you can use to control your devices2024-09-20 08:02
球迷號 :德容和德佩去倫敦是為了參加範德貝克的婚禮2024-09-20 07:33
米體列C羅轉會那不勒斯條件 :曼聯承擔75%薪水+奧斯梅恩離開2024-09-20 07:09
斯坦利重返國安實現無縫銜接 昔日助手正是臨時主帥2024-09-20 06:50
Hiddleswift finally followed each other on Instagram after 3 excruciating days2024-09-20 06:37
英超第五輪:切爾西大勝南安普頓,阿森納武耀阿斯頓維拉2024-09-20 06:37
巴爾韋德達成皇馬生涯100勝裏程碑,出戰152場7球8助2024-09-20 06:35
孔蒂談理查利森顛球 :他並非想表達不敬 ,我們很尊重諾丁漢森林2024-09-20 06:32
Tourist survives for month in frozen New Zealand wilderness after partner dies2024-09-20 06:17
一位切爾西球迷向伯利高喊:不要買戈登,他很垃圾2024-09-20 06:06