Back to feed
EUVD-2020-8054 · Published Aug 13, 2020
An issue was discovered in Zalo.exe in VNG Zalo Desktop 19.8.1.0. An attacker can run arbitrary commands on a remote Windows machine running the Zalo client by sending the user of the device a crafted file.
Technologies
Vng Zalo DesktopMicrosoft Windows
Weaknesses
CWE-74
CVSS scores
- v3.18.6
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H - v2.09.3
AV:N/AC:M/Au:N/C:C/I:C/A:C
MITRE ATT&CK
InferredWhere this vulnerability fits in an attack
Initial Access Execution Stealth Defense Impairment
References
Potentially impacted assets
See if this affects your attack surface
