Zero-day vulnerability in Telegram

faniebraai

faniebraai

RIP
Joined
Dec 7, 2010
Messages
78,906
Reaction score
506
Location
Next to the Braai
In October 2017, we learned of a vulnerability in Telegram Messenger’s Windows client that was being exploited in the wild. It involves the use of a classic right-to-left override attack when a user sends files over the messenger service.

Right-to-left override in a nutshell
The special nonprinting right-to-left override (RLO) character is used to reverse the order of the characters that come after that character in the string. In the Unicode character table, it is represented as ‘U+202E’; one area of legitimate use is when typing Arabic text. In an attack, this character can be used to mislead the victim. It is usually used when displaying the name and extension of an executable file: a piece of software vulnerable to this sort of attack will display the filename incompletely or in reverse.
Click to expand...

Source: https://securelist.com/zero-day-vulnerability-in-telegram/83800/
 
Invalid attachment as for now. Problem with faniebrarie is solved. :)
 
You must log in or register to reply here.
Back
Top
Sign up to the MyBroadband newsletter
X