Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
The autoupdate implementation in TimeDoctor Pro 1.4.72.3 on Windows relies on unsigned installer files that are retrieved without use of SSL, which makes it easier for man-in-the-middle attackers to execute arbitrary code via a crafted file.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
TimeDoctor Pro 安全绕过漏洞
Vulnerability Description
TimeDoctor Pro是Time Doctor团队开发的一套专业版时间跟踪和管理软件。 基于Windows平台的TimeDoctor Pro 1.4.72.3版本中的autoupdate实现过程中存在安全漏洞，该漏洞源于程序使用HTTP下载未经检查的文件，并执行这些文件。攻击者可借助特制的文件利用该漏洞实施中间人攻击，执行任意代码。
CVSS Information
N/A
Vulnerability Type
N/A