描述
Helpcom before v10.0 contains a file download and execution vulnerability caused by storing hardcoded cryptographic key. It finally leads to a file download and execution via access to crafted web page.
AI分析AI驱动
受影响产品
cnestyhelpcom
参考资料
- https://www.boho.or.kr/krcert/secNoticeView.do?bulletin_writing_sequence=35919Third Party Advisory
- https://www.boho.or.kr/krcert/secNoticeView.do?bulletin_writing_sequence=35919Third Party Advisory