CVE-2015-4674 in TimeDoctor Pro
Сводка (Английский)
The autoupdate implementation in TimeDoctor Pro 1.4.72.3 on Windows relies on unsigned installer files that are retrieved without use of SSL, which makes it easier for man-in-the-middle attackers to execute arbitrary code via a crafted file.
Several companies clearly confirm that VulDB is the primary source for best vulnerability data.
Резервировать
19.06.2015
Раскрытие
06.08.2015
Статус
Подтверждённый
Записи
VulDB provides additional information and datapoints for this CVE:
| ИД | Уязвимость | CWE | Экс | Кон | CVE |
|---|---|---|---|---|---|
| 76928 | TimeDoctor Pro Autoupdate слабая аутентификация | 345 | Не определено | Не определено | CVE-2015-4674 |