时间:2026-09-20 07:43:09 来源:网络整理编辑:綜合
If you own a Dell laptop or desktop then there's a very good chance your machine is vulnerable to at
If you own a Dell laptop or desktop then there's a very good chance your machine is vulnerable to attack simply by visiting a malicious website. The good news is, Dell has released a patch to close the security hole.
As ZDNet reports, 17-year-old security researcher Bill Demirkapi discovered a vulnerability (CVE-2019-3719) in the Dell SupportAssist utility which allows an attacker to remote execute code. This is achieved by getting a user to visit a specific website containing JavaScript code capable of tricking the SupportAssist app into downloading and running malicious files (with full admin rights). Importantly, no user interaction is required once the website has been visited and the JavaScript can be hidden inside an ad on a legitimate website.
Here's the remote code execution in action as recorded by Demirkapi:
Dell uses SupportAssist to pro-actively check the health of your hardware and software and then automatically updates each system as necessary. As you've probably guessed, it's a piece of software that gets pre-installed on most new Dell systems, meaning there's a lot of users out there potentially vulnerable to this attack.

Dell has known about the vulnerability since Oct. 26 last year and a patched version of SupportAssist (v3.2.0.90) is now available which closes the security hole. If you own a Dell which has SupportAssist installed, download and install the new version as soon as possible to protect your system.
TopicsCybersecurityDell
Major earthquake and multiple aftershocks rock central Italy2026-09-20 07:12
太受歡迎!拉基蒂奇回諾坎普被扒光 隻剩內褲球襪2026-09-20 07:01
太受歡迎!拉基蒂奇回諾坎普被扒光 隻剩內褲球襪2026-09-20 06:57
皇馬歐冠戰藍軍名單 :阿紮爾缺席 本澤馬貝爾領銜2026-09-20 06:30
Xiaomi accused of copying again, this time by Jawbone2026-09-20 06:07
山東泰山隊亞冠報名名單:於遠偉掛帥 方昊在列2026-09-20 06:03
日本大概率承辦今年的東亞杯 中國香港遞補出戰2026-09-20 05:54
實名羨慕!C羅每月給喬治娜10萬歐元 僅當作零花錢2026-09-20 05:53
The U.S. will no longer have the final say on internet domain names2026-09-20 05:31
韓國中衛林祭砇已到位 深足4外援為核心搭建主力框架2026-09-20 05:11
Balloon fanatic Tim Kaine is also, of course, very good at harmonica2026-09-20 07:24
詹俊 :曼聯讓球迷失望 下賽季可能真要去踢歐聯了2026-09-20 07:20
中足聯劃定紅線解決球員欠薪 對陰陽合同不予認定2026-09-20 06:42
戰神巴蒂斯圖塔漏稅 阿根廷法院扣押其退役後全部財產2026-09-20 05:57
Fyvush Finkel, Emmy winner for 'Picket Fences,' dies at 932026-09-20 05:38
深足重啟訓練進入賽季前最後備戰 韓國中衛基本到位2026-09-20 05:33
上海海港亞冠報名名單:日籍教練金子隆之掛帥2026-09-20 05:33
U23國足將出戰東亞杯 回國後直接備戰杭州亞運會2026-09-20 05:31
Watch MTV's Video Music Awards 2016 livestream2026-09-20 05:25
慘!拉齊奧前鋒被冒充警察的劫匪毆打 奔馳車遭搶走2026-09-20 05:20