CVE-2015-4674 | BDVDB-2026-70867 Detail

Description#

The autoupdate implementation in TimeDoctor Pro 1.4.72.3 on Windows relies on unsigned installer files that are retrieved without use of SSL, which makes it easier for man-in-the-middle attackers to execute arbitrary code via a crafted file.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

http://www.securityfocus.com/archive/1/535881/100/700/threaded
http://www.securityfocus.com/bid/75572
http://seclists.org/fulldisclosure/2015/Jun/105

Exploit#

No public exploit known

History#

Version 12015-08-07Record published in the CVE List.
Version 22024-08-06Most recent update recorded in the CVE List.