PlayStation Now bugs let sites run malicious code on Windows PCs

guest · Dec 7, 2020

PlayStation Now bugs let sites run malicious code on Windows PCs
December 7, 2020
https://www.bleepingcomputer.com/ne...-let-sites-run-malicious-code-on-windows-pcs/

Security bugs found in the PlayStation Now (PS Now) cloud gaming Windows application allowed attackers to execute arbitrary code on Windows devices running vulnerable app versions.

The vulnerabilities discovered by bug bounty hunter Parsia Hakimian affected PS Now version 11.0.2 and earlier on computers running Windows 7 SP1 or later.
Hakimian reported the PS Now bug on May 13, 2020, through PlayStation's official bug bounty program on HackerOne. PlayStation addressed the bug and tagged the bug report as 'Resolved' one month later, on June 25th, 2020.
Click to expand...

Insecure Electron app exposes users to RCE attacks
Hakimian found that, when chained, the critical security issues allowed unauthenticated attackers to launch remote code execution (RCE) attacks by abusing a code injection weakness.

"Any website loaded in any browser on the same machine can run arbitrary code on the machine through a vulnerable websocket connection," Hakimian said.
Click to expand...

Log in or Sign up

PlayStation Now bugs let sites run malicious code on Windows PCs

guest Guest

Log in or Sign up

PlayStation Now bugs let sites run malicious code on Windows PCs

guest Guest

Useful Searches