Get a Pentest and security assessment of your IT network.

Cyber Security

Qt5-Based GUI Apps Susceptible to Remote Code Execution

Through a little known command line argument, applications that are are developed using the Qt5 graphical user interface framework can be exposed to a remote code execution vulnerability. The platform pluginpath command is used to load specially crafted DLL programs that get loaded by the framework to extend its functionality. This means that if an attacker hosts a malicious DLL on a remote UNC share, they can remote load the DLL and execute it. In order to mitigate this type of exploit, applications need to sanitize the arguments so that remote shares are stripped or the platform plugin argument is removed.

Source: https://www.bleepingcomputer.com/news/security/qt5-based-gui-apps-susceptible-to-remote-code-execution/

Related posts
Cyber Security

Ashley Madison 2.0 Hackers Leak 20GB Data Dump, Including CEO's Emails

Cyber Security

Art of Twitter account hacking

Cyber Security

Alexa Eavesdropping Flub Re-Sparks Voice Assistant Privacy Debate

Cyber Security

Dan Geer, Richard Thieme on specialization in security