If you own a Dell laptop or desktop then there's a very good chance your machine is vulnerable to attack simply by visiting a malicious website. The good news is, Dell has released a patch to close the security hole.
As ZDNet reports, 17-year-old security researcher Bill Demirkapi discovered a vulnerability (CVE-2019-3719) in the Dell SupportAssist utility which allows an attacker to remote execute code. This is achieved by getting a user to visit a specific website containing JavaScript code capable of tricking the SupportAssist app into downloading and running malicious files (with full admin rights). Importantly, no user interaction is required once the website has been visited and the JavaScript can be hidden inside an ad on a legitimate website.
Here's the remote code execution in action as recorded by Demirkapi:
Dell uses SupportAssist to pro-actively check the health of your hardware and software and then automatically updates each system as necessary. As you've probably guessed, it's a piece of software that gets pre-installed on most new Dell systems, meaning there's a lot of users out there potentially vulnerable to this attack.
Dell has known about the vulnerability since Oct. 26 last year and a patched version of SupportAssist (v3.2.0.90) is now available which closes the security hole. If you own a Dell which has SupportAssist installed, download and install the new version as soon as possible to protect your system.
TopicsCybersecurityDell
(责任编辑：焦點)
Give your kitchen sponge a rest on this adorable bed
Twitter lets brands sponsor Periscope livestreams, starting with Chase and Grey Goose
GM recalls 4 million vehicles for airbag defect linked to death
Your mail will live long and prosper with new 'Star Trek' stampsNancy Pelosi warns colleagues after info hackedGive your kitchen sponge a rest on this adorable bed
Our kitchen sponges do a lot of work. Don't they deserve a good night's rest?"Sure," said design stu
...[详细]Watch the world's happiest dog groomer boogie with a canine client
Good luck finding a job this fun.Luis Antonio Caballero, who runs PetShop Perrito Feliz in Buenos Ai
...[详细]Britain, not Mexico, is funding a big wall to stop migrants
Britain is paying for the construction of a wall in Calais, near the so-called Jungle migrant camp,
...[详细]
Hillary Clinton's husband, Bill, was photographed hanging out with birthday girl Beyoncé and
...[详细]The U.S. will no longer have the final say on internet domain names
The National Telecommunications Information Admistration (NTIA) announced via 。 blog post
。on Tuesday
...[详细]Kaepernick jersey sales skyrocket following controversy
Colin Kaepernick struck a chord when he sat in protest during the singing of the national anthem bef
...[详细]Starbucks has a spicy new fall drink to challenge the beloved PSL
NEW YORK CITY — Fall is three weeks away, so naturally the Pumpkin Spice Latte is already show
...[详细]Zoo asks public to help name its gorilla and the people want 'Harambe'
In proof people learned nothing from the whole Boaty McBoatface fiasco, the Philadelphia Zoo announc
...[详细]Despite IOC ban, Rio crowds get their political messages across
The Olympics aren't meant to be a place for political expression -- the International Olympic Commit
...[详细]
Australian Rules football is part of Australia's national psyche, but I have to confess I didn't lik
...[详细]Visualizing July's astounding global temperature records
Bindi Irwin pays tribute to her 'hero' dad Steve on Aussie Father's Day
