时间:2025-10-08 06:10:35 来源:网络整理编辑:休閑
If you own a Dell laptop or desktop then there's a very good chance your machine is vulnerable to at
If you own a Dell laptop or desktop then there's a very good chance your machine is vulnerable to attack simply by visiting a malicious website. The good news is, Dell has released a patch to close the security hole.
As ZDNet reports, 17-year-old security researcher Bill Demirkapi discovered a vulnerability (CVE-2019-3719) in the Dell SupportAssist utility which allows an attacker to remote execute code. This is achieved by getting a user to visit a specific website containing JavaScript code capable of tricking the SupportAssist app into downloading and running malicious files (with full admin rights). Importantly, no user interaction is required once the website has been visited and the JavaScript can be hidden inside an ad on a legitimate website.
Here's the remote code execution in action as recorded by Demirkapi:
Dell uses SupportAssist to pro-actively check the health of your hardware and software and then automatically updates each system as necessary. As you've probably guessed, it's a piece of software that gets pre-installed on most new Dell systems, meaning there's a lot of users out there potentially vulnerable to this attack.
Dell has known about the vulnerability since Oct. 26 last year and a patched version of SupportAssist (v3.2.0.90) is now available which closes the security hole. If you own a Dell which has SupportAssist installed, download and install the new version as soon as possible to protect your system.
TopicsCybersecurityDell
U.S. government issues warning on McDonald's recalled wearable devices2025-10-08 06:10
When will Apple unveil the new MacBook Pro?2025-10-08 06:07
Bad news: Verizon will not offer replacements of the Samsung Note72025-10-08 05:33
Teen protested Trump rally with a 'grab my p*ssy' shirt2025-10-08 05:24
Sound the alarms: Simone Biles finally met Zac Efron2025-10-08 04:52
Trump's possible 182025-10-08 04:42
Hong Kong student activist Joshua Wong detained at Bangkok airport2025-10-08 04:25
Pierce Brosnan leaves India shaken and stirred by starring in 'pan masala' advertisement2025-10-08 03:48
Pole vaulter claims his penis is not to blame2025-10-08 03:44
Proud cat owner dresses cat as ewok2025-10-08 03:29
Katy Perry talks 'Rise,' her next batch of songs, and how to survive Twitter2025-10-08 05:44
John Oliver explains the enormous problem of police accountability2025-10-08 05:39
UK to exempt Armed Forces from European convention on human rights2025-10-08 05:32
Superheroes and supervillains ruled New York's Comic Con2025-10-08 05:19
The U.S. will no longer have the final say on internet domain names2025-10-08 05:05
Pregnant dog delays Moscow metro train by giving birth2025-10-08 05:01
Kids take cosplay to a more adorable level at New York Comic Con2025-10-08 04:50
iPhone gets sucked into a treadmill, attains this beautiful round shape2025-10-08 04:12
Man stumbles upon his phone background in real life2025-10-08 04:07
LeBron James just endorsed Hillary Clinton for president2025-10-08 03:53