If you own a Dell laptop or desktop then there's a very good chance your machine is vulnerable to attack simply by visiting a malicious website. The good news is, Dell has released a patch to close the security hole.
As ZDNet reports, 17-year-old security researcher Bill Demirkapi discovered a vulnerability (CVE-2019-3719) in the Dell SupportAssist utility which allows an attacker to remote execute code. This is achieved by getting a user to visit a specific website containing JavaScript code capable of tricking the SupportAssist app into downloading and running malicious files (with full admin rights). Importantly, no user interaction is required once the website has been visited and the JavaScript can be hidden inside an ad on a legitimate website.
Here's the remote code execution in action as recorded by Demirkapi:
Dell uses SupportAssist to pro-actively check the health of your hardware and software and then automatically updates each system as necessary. As you've probably guessed, it's a piece of software that gets pre-installed on most new Dell systems, meaning there's a lot of users out there potentially vulnerable to this attack.
Dell has known about the vulnerability since Oct. 26 last year and a patched version of SupportAssist (v3.2.0.90) is now available which closes the security hole. If you own a Dell which has SupportAssist installed, download and install the new version as soon as possible to protect your system.
TopicsCybersecurityDell
(责任编辑：焦點)
Old lady swatting at a cat ends up in Photoshop battle
We all need to work together to democratically water this plant named Jeff
Pokemon Go shouldn't be as good as it is
You would've loved these yarn names when you were an emo teen
New Zealand designer's photo series celebrates the elegance of agingPole vaulter claims his penis is not to blame
Following the cringeworthy moment in which pole vaulter Hiroki Ogita's penis grazed the bar and he f
...[详细]Ball boy makes friends with Cristiano Ronaldo by crashing Portugal's team photo
Portugal's headed to the Euro 2016 finals, and this kid is headed into high-fives from all his frien
...[详细]Typhoon Nepartak slams Taiwan, threatens China with more flooding
Super Typhoon Nepartak blasted Taiwan with 150 mile per hour winds on Thursday night and Friday, loc
...[详细]Chris Evans steps down as 'Top Gear' host after only 1 season
LONDON -- Top Gearpresenter Chris Evans has announced that he's stepping down from his role on the s
...[详细]Twitter grants everyone access to quality filter for tweet notifications
Twitter introduced two features Thursday in an effort to give users more control on what notificatio
...[详细]7 sexual health issues facing teen girls globally — and how you can help
Girls may run the world, but they're also up against major inequality -- and they could use more sup
...[详细]Miguel calls for change in new song devoted to Black Lives Matter
Miguel debuted a song called "How Many" about the deaths of Alton Sterling and Philando Castile on h
...[详细]New 'Game of Thrones' jewelry line gets us a little closer to being Khaleesi
Hopefully the Mother of Dragons won't burn us alive for stealing her look.Game of Thrones sadly does
...[详细]This app is giving streaming TV news a second try
Watchup, the once-buzzy news video streaming service, is trying its hand again at the news game with
...[详细]
Nihal Raj, known by his nickname Kicha, is no ordinary six-year-old. He's also a young Indian chef w
...[详细]What brands need to know about virtual reality
Super Typhoon Nepartak is an example of terrifying meteorological perfection
