As cited
Copy frozen at (site build).
vulnerabilities
Abandoned Popcorn Time app exposed millions of device to RCE attacks
Researchers discovered a remote code execution (RCE) vulnerability in the abandoned Time4Popcorn app, a Popcorn Time BitTorrent client fork, that could have allowed attackers to execute code with elevated privileges on millions of machines. The researchers remotely disabled the vulnerable updater to close the security flaw before it could be exploited.
Why it matters: Users with Time4Popcorn installed remain at risk from any exploitation window before the patch was deployed; practitioners should verify removal of this abandoned software from corporate and personal systems.
- Source published
- First seen by Cybersecurity Tracker
Source attribution
Correction
Correction recorded as of .
vulnerabilities
Abandoned Popcorn Time app exposed millions of device to RCE attacks
Researchers discovered a remote code execution (RCE) vulnerability in the abandoned Time4Popcorn app, a Popcorn Time BitTorrent client fork, that could have allowed attackers to execute code with elevated privileges on millions of machines. The researchers remotely disabled the vulnerable updater to close the security flaw before it could be exploited.
Why it matters: Users with Time4Popcorn installed remain at risk from any exploitation window before the patch was deployed; practitioners should verify removal of this abandoned software from corporate and personal systems.
- Source published
- First seen by Cybersecurity Tracker
Source attribution
Correction
Correction recorded as of .
vulnerabilities
Abandoned Popcorn Time app exposed millions of device to RCE attacks
Researchers discovered a remote code execution (RCE) vulnerability in the abandoned Time4Popcorn app, a Popcorn Time BitTorrent client fork, that could have allowed attackers to execute code with elevated privileges on millions of machines. The researchers remotely disabled the vulnerable updater to close the security flaw before it could be exploited.
Why it matters: Users with Time4Popcorn installed remain at risk from any exploitation window before the patch was deployed; practitioners should verify removal of this abandoned software from corporate and personal systems.
- Source published
- First seen by Cybersecurity Tracker