All of the bugs can be triggered remotely without authentication. The first vulnerability, CVE-2017-2853, occurs when the application attempts to open an EEG file based on a path requested by the client. This causes a buffer overflow error which can be exploited by attackers to remotely execute code.
from Google Alert - vulnerability https://ift.tt/2GXJzSo
via IFTTT
Subscribe to:
Post Comments (Atom)
No comments:
Post a Comment