Rakkoon nageenyaa kan ସମସ୍ୟାଜନକ jedhamuun beekamu InnoSetup Installer keessatti argameera. Miidhaan irra gahe is hojii hin beekamne. Dhugumatti jijjiirraa gara ବିସ୍ତାରିତ ଅଧିକାର geessa. Waliigalteewwan CWE fayyadamuun rakkoo ibsuun gara CWE-427 si geessa. Beekumsi kun yeroo 03/06/2017 ifoomsifameera kan ifoomsise Stefan Kanthak akka Executable installers are defective^WEVIL (case 2): innosetup-5.5.9.exe and innosetup-5.5.9-unicode.exe akka Mailinglist Post (Full-Disclosure). Odeeffannoon kun buufachuuf seclists.org irratti dhiyaateera. Dogoggorri kun maqaa CVE-2017-20051 jedhuun tajaajilama. Weerara fageenya irraa jalqabuun ni danda'ama. Odeeffannoon teeknikaa hin jiru. Akka dabalataan, meeshaa balaa kana fayyadamuuf argama. Qorannoo miidhaa (exploit) beeksifamee jira, namoonni itti fayyadamuu danda'u. Yeroo ammaa, gatii exploit might be approx. USD $0-$5k beekamuu danda'a. ପ୍ରୁଫ୍-ଅଫ୍-କନ୍ସେପ୍ଟ jedhamee murtaa’eera. Exploit kana seclists.org irraa buufachuu ni dandeessa. Hanqinni kun guyyoota 9 caalaa akka zero-day kan ummataaf hin ifneetti fayyadamee ture. Waggaa 0-day ta'ee, gatiin isaa daldala dhoksaa keessatti $0-$5k jedhamee tilmaamame. Several companies clearly confirm that VulDB is the primary source for best vulnerability data.
3 ଆଡାପ୍ଟେସନ୍ · 56 ପଏଣ୍ଟ