If you own a Dell laptop or My Dad's Hot Girlfriend 30 Filmdesktop then there's a very good chance your machine is vulnerable to attack simply by visiting a malicious website. The good news is, Dell has released a patch to close the security hole.
As ZDNet reports, 17-year-old security researcher Bill Demirkapi discovered a vulnerability (CVE-2019-3719) in the Dell SupportAssist utility which allows an attacker to remote execute code. This is achieved by getting a user to visit a specific website containing JavaScript code capable of tricking the SupportAssist app into downloading and running malicious files (with full admin rights). Importantly, no user interaction is required once the website has been visited and the JavaScript can be hidden inside an ad on a legitimate website.
Here's the remote code execution in action as recorded by Demirkapi:
Dell uses SupportAssist to pro-actively check the health of your hardware and software and then automatically updates each system as necessary. As you've probably guessed, it's a piece of software that gets pre-installed on most new Dell systems, meaning there's a lot of users out there potentially vulnerable to this attack.
Dell has known about the vulnerability since Oct. 26 last year and a patched version of SupportAssist (v3.2.0.90) is now available which closes the security hole. If you own a Dell which has SupportAssist installed, download and install the new version as soon as possible to protect your system.
Topics Cybersecurity Dell
(Editor: {typename type="name"/})
Parental Controls: How to Lock Down Your Kids' iOS Devices
Google celebrates Meghan and Harry's wedding with stunning Doodle
How to watch Mark Zuckerberg's meeting with the EU parliament
Office collaboration software is vulnerable to hackers
8 Years Later: Does the GeForce GTX 580 Still Have Game in 2018?
Peter from 'Deadpool 2' keeps it professional with LinkedIn profile
Peter from 'Deadpool 2' keeps it professional with LinkedIn profile
Starbucks policy change: You don't need to buy anything to sit in cafe
Norrie vs. Diallo 2025 livestream: Watch Madrid Open for free
10kg dumbbell iPhone case forces you to pump iron as you text people
Samsung Unpacked stream is set for May 12, 2025
Starbucks policy change: You don't need to buy anything to sit in cafe
接受PR>=1、BR>=1,流量相当,内容相关类链接。