时间:2025-04-26 20:41:58 来源:网络整理编辑:娛樂
If you own a Dell laptop or desktop then there's a very good chance your machine is vulnerable to at
If you own a Dell laptop or desktop then there's a very good chance your machine is vulnerable to attack simply by visiting a malicious website. The good news is, Dell has released a patch to close the security hole.
As ZDNet reports, 17-year-old security researcher Bill Demirkapi discovered a vulnerability (CVE-2019-3719) in the Dell SupportAssist utility which allows an attacker to remote execute code. This is achieved by getting a user to visit a specific website containing JavaScript code capable of tricking the SupportAssist app into downloading and running malicious files (with full admin rights). Importantly, no user interaction is required once the website has been visited and the JavaScript can be hidden inside an ad on a legitimate website.
Here's the remote code execution in action as recorded by Demirkapi:
Dell uses SupportAssist to pro-actively check the health of your hardware and software and then automatically updates each system as necessary. As you've probably guessed, it's a piece of software that gets pre-installed on most new Dell systems, meaning there's a lot of users out there potentially vulnerable to this attack.
Dell has known about the vulnerability since Oct. 26 last year and a patched version of SupportAssist (v3.2.0.90) is now available which closes the security hole. If you own a Dell which has SupportAssist installed, download and install the new version as soon as possible to protect your system.
TopicsCybersecurityDell
Tributes flow after death of former Singapore president S.R. Nathan2025-04-26 20:40
4 small things successful people do to see big results2025-04-26 20:36
Prankster sneaks a bunch of incredible fake albums into a record store2025-04-26 19:36
Everything you need to know about Valentine's Day you learned in second grade2025-04-26 19:19
Pokémon Go is so big that it has its own VR porn parody now2025-04-26 19:04
Voice actor accidentally hints at possible dinosaur2025-04-26 18:50
This wearable device can turn any surface into a keyboard2025-04-26 18:38
Confessions of a digital hoarder2025-04-26 18:35
Xiaomi accused of copying again, this time by Jawbone2025-04-26 18:16
'Legion' creator wants the show to prove itself before you call it an X2025-04-26 18:06
Fiji wins first2025-04-26 20:08
Uber offers drivers $1 each to wipe away labor threats valued in the billions2025-04-26 19:58
Here are all the best Super Bowl commercials in one place2025-04-26 19:57
Artist comes up with a creative way to cope with her disorder2025-04-26 18:58
Two astronauts just installed a new parking spot on the International Space Station2025-04-26 18:52
John Oliver is so over Obama after those kitesurfing pictures2025-04-26 18:23
'Man Seeking Woman' creator Simon Rich on the show you need to be watching2025-04-26 18:19
7 meaningful ways to celebrate Black History Month2025-04-26 18:02
This app is giving streaming TV news a second try2025-04-26 18:01
Prime Minister's Twitter circle generates debate in the Parliament2025-04-26 17:55