【】

If you own a Dell laptop or desktop then there's a very good chance your machine is vulnerable to attack simply by visiting a malicious website. The good news is, Dell has released a patch to close the security hole.
As ZDNet reports, 17-year-old security researcher Bill Demirkapi discovered a vulnerability (CVE-2019-3719) in the Dell SupportAssist utility which allows an attacker to remote execute code. This is achieved by getting a user to visit a specific website containing JavaScript code capable of tricking the SupportAssist app into downloading and running malicious files (with full admin rights). Importantly, no user interaction is required once the website has been visited and the JavaScript can be hidden inside an ad on a legitimate website.
Here's the remote code execution in action as recorded by Demirkapi:
Dell uses SupportAssist to pro-actively check the health of your hardware and software and then automatically updates each system as necessary. As you've probably guessed, it's a piece of software that gets pre-installed on most new Dell systems, meaning there's a lot of users out there potentially vulnerable to this attack.

Dell has known about the vulnerability since Oct. 26 last year and a patched version of SupportAssist (v3.2.0.90) is now available which closes the security hole. If you own a Dell which has SupportAssist installed, download and install the new version as soon as possible to protect your system.
Featured Video For You
Scientists successfully 3D-print heart from human cells
TopicsCybersecurityDell
相关文章
What brands need to know about virtual reality
Virtual reality (VR) is all the rage. Premium publishers like USA Today, the New York Times, and AOL2025-04-04- 【早報】7分領跑開啟2023 !阿森納新年讓英超換新天?_足球 ( 利雅得,常規賽 )www.ty42.com 日期:2023-01-16 00:00:00| 評論(已有359449條評論)2025-04-04
- 石宇奇拒絕一輪遊 ,2-1逆轉印尼選手晉級!趙俊鵬連續兩周贏內戰_羽毛球 - 世界杯,歐洲杯 ,天下體育 ,足球,世界杯 ,籃球,羽球,乒乓球 ,球類, 棒球 ( 公開賽,內戰 )www.ty42.com 日2025-04-04
歐足聯官宣 ,曼城高居第一 ,當大黑馬力壓皇馬紅軍,瓜帥悲喜交加
歐足聯官宣 ,曼城高居第一,當大黑馬力壓皇馬紅軍,瓜帥悲喜交加_足球 ( 賽季,迪奧 )www.ty42.com 日期:2023-01-17 00:00:00| 評論(已有359550條評論)2025-04-045 people Tim Cook calls for advice on running the biggest company in the world
It's only fitting that the leader of the biggest company in the world has a pretty impressive list o2025-04-04世界羽聯巡回賽超級1000賽事馬來西亞公開賽今日開賽 泉州國手黃東萍衝擊混雙冠軍
世界羽聯巡回賽超級1000賽事馬來西亞公開賽今日開賽 泉州國手黃東萍衝擊混雙冠軍_羽毛球 - 世界杯,歐洲杯 ,天下體育,足球,世界杯 ,籃球,羽球,乒乓球,球類, 棒球 ( 晉江,組合 )www.ty2025-04-04
最新评论