This will add a prompting dialog that appear as http://imgur.com/8IgJLkZ

The text is a combination of Internet Explorer and Chrome warning texts.

Note that, per the patch, the following is excluded: 
 * http:,
 *https:
 * www.
 * mailto:

** Patch added: "dcpp_validateopenlink.diff"
   
https://bugs.launchpad.net/dcplusplus/+bug/1502650/+attachment/4484208/+files/dcpp_validateopenlink.diff

-- 
You received this bug notification because you are a member of
Dcplusplus-team, which is subscribed to DC++.
https://bugs.launchpad.net/bugs/1502650

Title:
  DC++ 0.851 - Arbitrary code execution

Status in DC++:
  New

Bug description:
  Details and PoC:
  http://kacperrybczynski.com/research/dcpp_851_arbitrary_code_execution/

  By supplying an UNC path in the *.dcext plugin file or main/pm hub
  chat, a remote file will be automatically downloaded, which can result
  in arbitrary code execution.

To manage notifications about this bug go to:
https://bugs.launchpad.net/dcplusplus/+bug/1502650/+subscriptions

_______________________________________________
Mailing list: https://launchpad.net/~linuxdcpp-team
Post to     : [email protected]
Unsubscribe : https://launchpad.net/~linuxdcpp-team
More help   : https://help.launchpad.net/ListHelp

Reply via email to