Remote Code Execution Vulnerabilities

This document will explain you about the vulnerabilities, which allows attackers to execute arbitrary code on the Desktop Central server. You can find more details on its impact in Desktop Central, and the steps to be followed to get it fixed.

Vulnerabilities	Update Released Build	Update Released Date
CVE-2014-5005, CVE-2014-5006, CVE-2014-5007, CVE-2013-7390	90055	Aug 7th 2014
CVE-2014-9371	90066	Sep 10th 2014
Remote Code Execution on ZohoMeetingAppletInstall.jar	90128	Jan 22nd 2015

What was the Problem?

Attackers were able to remotely execute vulnerable arbitrary codes on Desktop Central server. This might hinder or harm the data or process of Desktop Central.

How do I fix it?

This has been identified and fixed, in the Desktop Central build # 90128 . Upgrade to the latest build for these issues to be fixed.

Keywords: Remote Code Execution, Security Updates, Vulnerabilities and Fixes, CVE-2014-5005, CVE-2014-5006, CVE-2014-5007, CVE-2013-7390, CVE-2014-9371, ZohoMeetingAppletInstall.jar