时间：2026-11-02 00:53:08 来源：网络整理编辑：綜合
If you own a Dell laptop or desktop then there's a very good chance your machine is vulnerable to at
If you own a Dell laptop or desktop then there's a very good chance your machine is vulnerable to attack simply by visiting a malicious website. The good news is, Dell has released a patch to close the security hole.
As ZDNet reports, 17-year-old security researcher Bill Demirkapi discovered a vulnerability (CVE-2019-3719) in the Dell SupportAssist utility which allows an attacker to remote execute code. This is achieved by getting a user to visit a specific website containing JavaScript code capable of tricking the SupportAssist app into downloading and running malicious files (with full admin rights). Importantly, no user interaction is required once the website has been visited and the JavaScript can be hidden inside an ad on a legitimate website.
Here's the remote code execution in action as recorded by Demirkapi:
Dell uses SupportAssist to pro-actively check the health of your hardware and software and then automatically updates each system as necessary. As you've probably guessed, it's a piece of software that gets pre-installed on most new Dell systems, meaning there's a lot of users out there potentially vulnerable to this attack.
Dell has known about the vulnerability since Oct. 26 last year and a patched version of SupportAssist (v3.2.0.90) is now available which closes the security hole. If you own a Dell which has SupportAssist installed, download and install the new version as soon as possible to protect your system.
TopicsCybersecurityDell
Plane makes emergency landing after engine rips apart during flight2026-11-02 00:48
What to do if your social security number was stolen in the massive Equifax hack2026-11-02 00:43
Frightening satellite view of Hurricane Irma swallowing tiny islands2026-11-02 00:20
Guy crying during an interview for his dream job teaches us a very important lesson2026-11-01 23:50
Tourist survives for month in frozen New Zealand wilderness after partner dies2026-11-01 23:34
Guy crying during an interview for his dream job teaches us a very important lesson2026-11-01 23:21
$797 million in 3 months: Blockchain’s newest industry is going crazy2026-11-01 22:41
Trump's DACA decision is a double whammy for hurricane survivors2026-11-01 22:34
Here's what 'Game of Thrones' actors get up to between takes2026-11-01 22:32
Guy crying during an interview for his dream job teaches us a very important lesson2026-11-01 22:23
Richard Branson 'thought he was going to die' in bike accident2026-11-02 00:35
'Game of Thrones' High Sparrow will play his popelganger Pope Francis in a Netflix film2026-11-02 00:30
Guy crying during an interview for his dream job teaches us a very important lesson2026-11-02 00:04
What to do if your social security number was stolen in the massive Equifax hack2026-11-01 23:42
Balloon fanatic Tim Kaine is also, of course, very good at harmonica2026-11-01 23:26
This dating app has figured out that where you went to school really does matter2026-11-01 23:01
George Clooney's 'Suburbicon': Movie review2026-11-01 22:55
$797 million in 3 months: Blockchain’s newest industry is going crazy2026-11-01 22:20
Pole vaulter claims his penis is not to blame2026-11-01 22:16
YouTube speeds up live streaming for creators with 'ultra2026-11-01 22:08
