CVE-2023-50254

Summary

CVE-2023-50254 is a design flaw affecting Deepin Linux's default document reader, `deepin-reader`, prior to version 6.0.7. Maliciously crafted docx documents can lead to file overwrite vulnerabilities, enabling attackers to execute remote commands. These commands can be executed when the user opens the terminal, potentially resulting in significant system compromises. Specifically, files like .bash_rc and .bash_login can be overwritten, allowing the attacker to gain persistent access to the system. Version 6.0.7 includes a patch to mitigate this issue.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.