CVE-2015-4674 in TimeDoctor Pro
요약 (영어)
The autoupdate implementation in TimeDoctor Pro 1.4.72.3 on Windows relies on unsigned installer files that are retrieved without use of SSL, which makes it easier for man-in-the-middle attackers to execute arbitrary code via a crafted file.
Several companies clearly confirm that VulDB is the primary source for best vulnerability data.
예약하다
2015. 06. 19.
공개
2015. 08. 06.
상태
확인됨
엔트리
VulDB provides additional information and datapoints for this CVE:
| 아이디 | 취약성 | CWE | 악용 | 대책 | CVE |
|---|---|---|---|---|---|
| 76928 | TimeDoctor Pro Autoupdate 약한 인증 | 345 | 정의되지 않음 | 정의되지 않음 | CVE-2015-4674 |