A vulnerability in Viber before 10.7.0 for Desktop (Windows) could allow an attacker to execute arbitrary commands on a targeted system. This vulnerability is due to unsafe search paths used by the application URI. An attacker could exploit this vulnerability by convincing a targeted user to follow a malicious link. Successful exploitation could cause the application to load libraries from the directory targeted by the URI link. The attacker could use this behavior to execute arbitrary commands on the system with the privileges of the targeted user, if the attacker can place a crafted library in a directory that is accessible to the vulnerable system.
oryginał ENCVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:HRakuten Viber
APPRakuten< 10.7.0
Powiązane podatności
Rakuten Viber: statyczny fingerprint TLS umożliwia identyfikację ruchu proxy
Viber for Windows up to 13.2.0.39 does not properly quote its custom URI handler. A malicious website could la...
Viber through 11.7.0.5 allows a remote attacker who can capture a victim's internet traffic to steal their Vib...
Viber Desktop 25.6.0 is vulnerable to HTML Injection via the text parameter of the message compose/forward int...
An exploitable information disclosure vulnerability exists in the 'Secret Chats' functionality of Rakuten Vibe...