{"id":6801,"date":"2017-02-27T14:19:11","date_gmt":"2017-02-27T22:19:11","guid":{"rendered":"http:\/\/www.palada.net\/index.php\/2017\/02\/27\/news-592\/"},"modified":"2017-02-27T14:19:11","modified_gmt":"2017-02-27T22:19:11","slug":"news-592","status":"publish","type":"post","link":"http:\/\/www.palada.net\/index.php\/2017\/02\/27\/news-592\/","title":{"rendered":"SSD Advisory – HTC Sync Remote Code Execution"},"content":{"rendered":"

Credit to Author: Maor Schwartz| Date: Mon, 27 Feb 2017 10:19:14 +0000<\/strong><\/p>\n

\n

Vulnerabilities Summary<\/strong>
The following advisory describes a remote code execution (RCE) found in HTC Sync version v3.3.63.<\/p>\n

Credit<\/strong>
An independent security researcher has reported this vulnerability to Beyond Security\u2019s SecuriTeam Secure Disclosure program.<\/p>\n

Vendor response<\/strong>
The vulnerability was not reported to the vendor because the product has reached end of life<\/a> on 31 August 2016 and was replaced by HTC Sync Manager which is not vulnerable to this vulnerability.<\/p>\n

<\/span><\/p>\n

Vulnerability Details<\/strong><\/p>\n

HTC sync contains a remotely exploitable vulnerability within the latest HTC Sync (v3.3.63) software. During startup or if explicitly triggered by the user, HTC Sync checks for latest versions by sending an HTTP<\/em> request to htc.com<\/em> and then parses its reply (XML format). <\/p>\n

In particular, the application first requests:<\/p>\n<\/p>\n

\t\t<\/p>\n

\n
<\/span> \t\t\t<\/p>\n
\n
\n
<\/div>\n<\/div>\n
\n
<\/div>\n<\/div>\n
\n
<\/div>\n<\/div>\n
\n
<\/div>\n<\/div>\n
\n
<\/div>\n<\/div>\n
\n
<\/div>\n<\/div>\n<\/div>\n<\/div>\n
<\/div>\n