Abandoned Popcorn Time app exposed millions of device to RCE attacks
Security researchers identified a vulnerability in an abandoned fork of the Popcorn Time BitTorrent client called Time4Popcorn. The flaw, present in the app's updater mechanism, could have allowed attackers to execute malicious code with elevated privileges on millions of user devices. Researchers proactively disabled the vulnerable updater to prevent exploitation.
Key points
- RCE vulnerability found in abandoned Time4Popcorn app
- Vulnerable updater could enable malicious code execution
- Researchers remotely closed the security flaw
- Millions of devices potentially affected
Summary and key points written by AI from the headline and a short excerpt, so they can be incomplete or wrong. BleepingComputer did the reporting; read the original for the full story.
Read the full story at BleepingComputer
