NS-SA-2025-1004

简介

important: nde-archiver security update

严重级别

important

主题

An update for nde-archiver is now available for NewStartOS V4.5.2
NewStart Security has rated this update as having a security impact of critical.

详细描述

The nde archiver program of NewStartOS has an arbitrary code execution vulnerability, which can be exploited to execute arbitrary code. The attacker uses malicious code as the compressed file name and sends the malicious compressed file to the victim. The victim uses NewStartOS's default compressed file viewer to double-click and open the compressed file, triggering the malicious code.

影响组件

• nde-archiver

影响产品

• NewStartOS V4.5.2

更新包

CVE

参考