PT-2008-4842 · Speedbit · Speedbit Video Acceleration
Publicado
2008-08-01
·
Atualizado
2008-09-05
·
CVE-2008-3439
CVSS v2.0
7.5
Alta
| Vetor | AV:N/AC:L/Au:N/C:P/I:P/A:P |
Name of the Vulnerable Software and Affected Versions
SpeedBit Video Acceleration versions prior to 2.2.1.8
Description
The issue allows man-in-the-middle attackers to execute arbitrary code via a Trojan horse update. This can be achieved through techniques such as evilgrade and DNS cache poisoning, which exploit the lack of proper verification of update authenticity.
Recommendations
For versions prior to 2.2.1.8, update to version 2.2.1.8 or later to resolve the issue. As a temporary workaround, consider restricting network access to trusted sources to minimize the risk of exploitation. Avoid using unsecured networks for updates until the issue is resolved.
Correção
Code Injection
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
Speedbit Video Acceleration