Welcome, Guest
Username: Password: Remember me

TOPIC: Critical SQLite Flaw Leaves Millions of Apps Vulnerable to Hackers

Critical SQLite Flaw Leaves Millions of Apps Vulnerable to Hackers 28 Dec 2018 18:04 #12444

  • Paul-UB40
  • Paul-UB40's Avatar
  • Administrator
  • Posts: 2851
  • Thank you received: 2598
Anyone on here with there own Website or Blog may well find this of Interest.

Critical SQLite Flaw Leaves Millions of Apps Vulnerable to Hackers
December 14, 2018Swati Khandelwal

Cybersecurity researchers have discovered a critical vulnerability in widely used SQLite database software that exposes billions of deployments to hackers.
Dubbed as 'Magellan' by Tencent's Blade security team, the newly discovered SQLite flaw could allow remote attackers to execute arbitrary or malicious code on affected devices, leak program memory or crash applications.
SQLite is a lightweight, widely used disk-based relational database management system that requires minimal support from operating systems or external libraries, and hence compatible with almost every device, platform, and programming language.
SQLite is the most widely deployed database engine in the world today, which is being used by millions of applications with literally billions of deployments, including IoT devices, macOS and Windows apps, including major web browsers, such as Adobe software, Skype and more.
Since Chromium-based web browsers—including Google Chrome, Opera, Vivaldi, and Brave—also support SQLite through the deprecated Web SQL database API, a remote attacker can easily target users of affected browsers just by convincing them into visiting a specially crafted web-page.
"After testing Chromium was also affected by this vulnerability, Google has confirmed and fixed this vulnerability," the researchers said in a blog post.
SQLite has released updated version 3.26.0 of its software to address the issue after receiving responsible disclosure from the researchers.
Google has also released Chromium version 71.0.3578.80 to patch the issue and pushed the patched version to the latest version of Google Chrome and Brave web-browsers.

Read More Here;
The administrator has disabled public write access.
The following user(s) said Thank You: TheFinnster