There is a high-risk security vulnerability in the Windows version of the Tencent QQ desktop client, which has not yet been fixed. It is extremely difficult to exploit and very harmful. The attacker only needs to construct an extremely simple message link: when the user clicks on the message link in QQ friends or QQ groups, QQ will automatically download and open the malicious file.
This problem affects the Windows version of QQ 9.7.13 and earlier versions, and the latest version is 9.7.13, so theoretically these versions are affected, but the QQ NT version is 9.9 +, Cyber Kunlun did not mention this version, so it should be It is not affected, but users have to reinstall the QQ NT version.
Vulnerability description:
On August 20, 2023, Cyber Kunlun captured a remote execution vulnerability using the QQ desktop client. This vulnerability is a logic vulnerability. Attackers can use this vulnerability to download and execute files on the QQ client without user confirmation.
When the user clicks on the message link, the QQ client will automatically download and open the file, so the attacker can create any malware and construct a message link to induce the user to click. After clicking, the user will be installed the Trojan horse without knowing it.
Scope of impact and disposal recommendations:
This problem affects the Windows version of QQ 9.7.13 and earlier versions. The latest version is 9.7.13, so there is no new version available to fix the vulnerability.
But the version number of QQ NT version is 9.9 + version , this version is not affected, but users may have to reinstall QQ NT version.
In addition, users should not click on various message links sent by others. They can read but do not click, otherwise it is easy to get tricked. Since the exploit method of this vulnerability is relatively simple, some attackers may have already started to use this method to carry out attacks.
What is the message link:
That is, the message that contains the reply. In Tencent QQ, after replying to the message by yourself or others, QQ will wrap the message in a box. Click this box to quickly view the message. It is essentially a message link.
This vulnerability exploits this function, and security experts have demonstrated it to confirm the existence of this vulnerability.