Evernote released a patch for a gap that allowed intruders performing any code on macOS

Specialists in cybersecurity detected an error that allows hackers run malware code from Evernote.

EN[,dropcap]s a result, intruders can use specially created URI in a note that would lead to the attack. gjennom fil:/// link they offer user to open any malware file, For eksempel, “../../../../malware.app“.

Such vulnerabilities united under the term “path traversal”.

While Evernote provides technical opportunity to share notes, hackers can use this vulnerability and send malware notes in .enex format to supposed victims.

Vulnerability touched Apple laptops with macOS. Interessant, on other platforms program does not endanger user’s confidentiality.

Recently issue traced with identification number CVE-2019-10038, and patch released for Evernote versions 7.10 Beta and 7.9.1. GA on macOS.

Correction is already working. Now it looks as a notification that arises with the attempt to open suspicious link. It is important to add that similar error funnet in Electronic Arts Origin service.

Kilde: www.inputzero.io

Om Trojan Killer

Carry Trojan Killer Portable på minnepinne. Vær sikker på at du er i stand til å hjelpe din PC motstå eventuelle cyber trusler uansett hvor du går.

Sjekk også

MageCart på Heroku Cloud Platform

Forskere fant flere MageCart Web Skimmers På Heroku Cloud Platform

Forskere ved Malwarebytes rapportert om å finne flere MageCart web skimmere på Heroku Cloud Platform …

Android spyware CallerSpy

CallerSpy spyware masker som en Android-chat program

Trend Micro eksperter oppdaget malware CallerSpy, som masker som en Android-chat program og, …

Legg igjen et svar