CVE-2018-0690: Code Injection
Published Nov 15, 2018
·Updated
An unvalidated software update vulnerability in Music Center for PC version 1.0.02 and earlier could allow a man-in-the-middle attacker to tamper with an update file and inject executable files.
Affected Software
1 affected component
Sony Music Center For Pc<=1.0.02
Event History
Nov 15, 2018
CVE Published
via MITRE·03:00 PM
Data Sourced
via MITRE·03:00 PM
DescriptionWeakness
Frequently Asked Questions
1
What is CVE-2018-0690?
CVE-2018-0690 is an unvalidated software update vulnerability in Music Center for PC version 1.0.02 and earlier.
2
How does CVE-2018-0690 affect Sony Music Center For Pc?
CVE-2018-0690 allows a man-in-the-middle attacker to tamper with an update file and inject executable files.
3
What is the severity of CVE-2018-0690?
The severity of CVE-2018-0690 is high with a CVSS score of 7.5.
4
How can I fix CVE-2018-0690?
To fix CVE-2018-0690, update Music Center for PC to a version later than 1.0.02.
5
Where can I find more information about CVE-2018-0690?
You can find more information about CVE-2018-0690 on the JVN or Sony Music Center For PC websites.