Ever freigegeben einen Patch für eine Lücke, die Eindringlingen auf macOS jeden Code Durchführung erlaubt

Specialists in cybersecurity detected an error that allows hackers run malware code from Evernote.

EIN[,dropcap]s ein Ergebnis, intruders can use specially created URI in a note that would lead to the attack. durch Datei:/// link they offer user to open any malware file, Zum Beispiel, “../../../../malware.app“.

Such vulnerabilities united under the term “path traversal“.

While Evernote provides technical opportunity to share notes, hackers can use this vulnerability and send malware notes in .enex format to supposed victims.

Vulnerability touched Apple laptops with macOS. Interessant, on other platforms program does not endanger user’s confidentiality.

Recently issue traced with identification number CVE-2019-10038, and patch released for Evernote versions 7.10 Beta and 7.9.1. GA on macOS.

Correction is already working. Now it looks as a notification that arises with the attempt to open suspicious link. It is important to add that similar error gefunden in Electronic Arts Origin service.

Quelle: www.inputzero.io

Polina Lisovskaya

Ich arbeite seit Jahren als Marketingleiterin und liebe es, für dich nach interessanten Themen zu suchen

Hinterlasse eine Antwort

Schaltfläche "Zurück zum Anfang"