Security Advisory

CVE-2015-4674

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2015-08-07 01:00:00

Last updated 2024-08-06 06:18:12

Assigner mitre

CVSS score not scored

State PUBLISHED

Description

The autoupdate implementation in TimeDoctor Pro 1.4.72.3 on Windows relies on unsigned installer files that are retrieved without use of SSL, which makes it easier for man-in-the-middle attackers to execute arbitrary code via a crafted file.

← Browse all CVEs View on cve.org ↗