CVE-2020-7846

Publication date

2021-02-24 15:46:51

Family

krcert

State

PUBLISHED

Description

Helpcom before v10.0 contains a file download and execution vulnerability caused by storing hardcoded cryptographic key. It finally leads to a file download and execution via access to crafted web page.