If you own a Dell laptop or desktop then there's a very good chance your machine is vulnerable to attack simply by visiting a malicious website. The good news is, Dell has released a patch to close the security hole.
As ZDNet reports, 17-year-old security researcher Bill Demirkapi discovered a vulnerability (CVE-2019-3719) in the Dell SupportAssist utility which allows an attacker to remote execute code. This is achieved by getting a user to visit a specific website containing JavaScript code capable of tricking the SupportAssist app into downloading and running malicious files (with full admin rights). Importantly, no user interaction is required once the website has been visited and the JavaScript can be hidden inside an ad on a legitimate website.
Here's the remote code execution in action as recorded by Demirkapi:
Dell uses SupportAssist to pro-actively check the health of your hardware and software and then automatically updates each system as necessary. As you've probably guessed, it's a piece of software that gets pre-installed on most new Dell systems, meaning there's a lot of users out there potentially vulnerable to this attack.
Dell has known about the vulnerability since Oct. 26 last year and a patched version of SupportAssist (v3.2.0.90) is now available which closes the security hole. If you own a Dell which has SupportAssist installed, download and install the new version as soon as possible to protect your system.
TopicsCybersecurityDell
(责任编辑：時尚)
Michael Phelps says goodbye to the pool with Olympic gold
The internet goes wild over a bonkers NFL Draft Round 1
Wordle today: Here's the answer, hints for March 16
Webb telescope snaps image of solar system that's nothing like ours
Mall builds realDespite IOC ban, Rio crowds get their political messages across
The Olympics aren't meant to be a place for political expression -- the International Olympic Commit
...[详细]Scientists find wild fish swimming below 27,000 feet. How it survives.
In a hostile realm of the ocean, where the pressure is over 830 times greaterthan on Earth's surface
...[详细]An open letter to Elon Musk: Leave stan Twitter alone
Elon, babe, you're down bad. You've let go of 73 percent of Twitter's staff, let the site deteriorat
...[详细]Houston vs. Miami livestreams: How to watch the Sweet 16 matchup
It’s sweet on Friday too!With one night of the Sweet 16 in the books, the NCAA men’s bas
...[详细]Did our grandparents have the best beauty advice?
Do our grandparents really know what's best?They're older and wiser, and they have no shortage of ad
...[详细]Biden wants everyone driving an EV with 'strongest
Newly proposed auto emission standards are making the Biden administration's expectation for the fut
...[详细]'The Night Agent' literally doesn't sleep. Someone allow him a nap.
The Night Agent has one job. It's literally written on the tin. But the titular protagonist of Netfl
...[详细]NASA's black hole animation is jaw
The mass of the biggest black holes is unimaginable.Even a small black hole is extraordinarily dense
...[详细]Here's George Takei chilling in zero gravity for the 'Star Trek' anniversary
There's nothing like good friends, good memories and zero gravity to celebrate a milestone. 。In honor
...[详细]NASA video shows astonishing view into Mars crater
NASA's adventurous Perseverance rover is currently perched over a big Martian impact crater. And it
...[详细]Two states took big steps this week to get rid of the tampon tax
Why we enjoy being humiliated during sex
