If you own a Dell laptop or desktop then there's a very good chance your machine is vulnerable to attack simply by visiting a malicious website. The good news is, Dell has released a patch to close the security hole.
As ZDNet reports, 17-year-old security researcher Bill Demirkapi discovered a vulnerability (CVE-2019-3719) in the Dell SupportAssist utility which allows an attacker to remote execute code. This is achieved by getting a user to visit a specific website containing JavaScript code capable of tricking the SupportAssist app into downloading and running malicious files (with full admin rights). Importantly, no user interaction is required once the website has been visited and the JavaScript can be hidden inside an ad on a legitimate website.
Here's the remote code execution in action as recorded by Demirkapi:
Dell uses SupportAssist to pro-actively check the health of your hardware and software and then automatically updates each system as necessary. As you've probably guessed, it's a piece of software that gets pre-installed on most new Dell systems, meaning there's a lot of users out there potentially vulnerable to this attack.
Dell has known about the vulnerability since Oct. 26 last year and a patched version of SupportAssist (v3.2.0.90) is now available which closes the security hole. If you own a Dell which has SupportAssist installed, download and install the new version as soon as possible to protect your system.
TopicsCybersecurityDell
(责任编辑：焦點)
The five guys who climbed Australia's highest mountain, in swimwear16 inspiring 'Game of Thrones' quotes to live by14 TikTok accounts to follow for fun STEM lessons16 inspiring 'Game of Thrones' quotes to live byThis app is giving streaming TV news a second tryTributes flow after death of former Singapore president S.R. Nathan
The Singaporean government has announced that former president, 92-year-old Sellapan Ramanathan (wid
...[详细]Wordle today: Here's the answer and hints for July 21
Can't get enough of Wordle? Try Mashable's free version nowYou made it! It's Friday! Celebrate with
...[详细]Twitter/X advertisers can avoid toxic tweets, says Elon Musk. Why can't users?
In the world of advertising, getting people to trust your brand is everything — a painstaking
...[详细]Webb telescope's photo of Saturn looks really weird. Here's why.
Hello, Saturn.The James Webb Space Telescope — the powerful observatory that often views galax
...[详细]One of the most controversial power struggles in media comes to a close
One of the world's biggest media companies has been embroiled in a complex personal and professional
...[详细]How to protect yourself from Canada wildfire smoke
UPDATE: Jun. 28, 2023, 12:06 p.m. EDT Smoke from Canadian wildfires is again impacting air quality i
...[详细]X (aka Twitter) pays users now. Expect engagement bait to rise.
Prepare for your Twitter — sorry, X — feed to clog up with engagement bait.In July, owne
...[详细]'Venture Bros' creators discuss the show's last reveal and what it means
In the final moments of The Venture Bros.finale, we finally learn the identity of Hank and Dean Vent
...[详细]Uber's $100M settlement over drivers as contractors may not be enough
UPDATE: Sept. 7, 2016, 4:41 p.m. EDT
。 A ruling in a different case on Wednesday, Sept. 7 may have ch
...[详细]16 inspiring 'Game of Thrones' quotes to live by
Regardless of how you feel about the ending of Game of Thrones, it was the world's favorite TV show
...[详细]This German startup wants to be your bank (without being a bank)
16 inspiring 'Game of Thrones' quotes to live by
