Sophos Patches RCE and Memory Disclosure Vulnerabilities in HitmanPro.Alert

[silversurfer]

Two security issues in Sophos' malware detection and protection utility HitmanPro.Alert could allow potential attackers to gain elevated privileges, execute code remotely, and read kernel memory contents on targeted machines, as disclosed by Cisco Talos's Marcin Noga.

Both vulnerabilities affect HitmanPro.Alert versions prior to and including the 3.7.6.744 andhave been patched by Sophos on September 17 following Cisco Talos's initial disclosure on July 23, and have now been publicly disclosed.

Source: https://news.softpedia.com/news/sophos-p...3443.shtml

[mekelek]