Description (CNA)
An issue was discovered in Zalo.exe in VNG Zalo Desktop 19.8.1.0. An attacker can run arbitrary commands on a remote Windows machine running the Zalo client by sending the user of the device a crafted file.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| n/a / n/a | affected n/a |
CWE
No CWE identifiers supplied.
References
- https://threatspike.com
- https://github.com/VNG-Zalo
- https://www.threatspike.com/blog/cve-2020-16087.html
ADP enrichment
No English description supplied.