Dead Popcorn Time Updater Put Millions of Computers at Risk of Takeover
Summary
A vulnerability in the updater for the Popcorn Time streaming application, which ran at system boot with full privileges, put millions of computers at risk. The updater periodically checked a domain that could have been used to execute malicious code on compromised systems.
IFF Assessment
A vulnerability that allows for takeover of millions of computers is bad news for defenders.
Severity
The vulnerability allows for remote code execution with high privileges on millions of systems that run the updater. This indicates a critical severity due to the widespread impact and potential for complete system compromise.
Defender Context
This incident highlights the risk posed by legacy software and poorly maintained updaters. Defenders should be aware that even seemingly dormant applications can harbor critical vulnerabilities, and should implement strategies for managing and patching software across their environments, especially components that run with elevated privileges.