Zambiri zawululidwa za zofooka pa nsanja yotseguka ya webOS yomwe ingagwiritsidwe ntchito kupeza mwayi wopeza ma API otsika adongosolo la LG TV ndi zida zina zochokera papulatifomu. Kuwukiraku kumachitika kudzera pakukhazikitsidwa kwa pulogalamu yopanda mwayi yomwe imagwiritsa ntchito zofooka kudzera pakupeza ma API amkati, ndikukulolani kuti mulembenso / kuwerenga mafayilo osagwirizana kapena kuchita zina zomwe zimaloledwa ndi ma API adongosolo.
Chiwopsezo choyamba chomwe chazindikirika chimakulolani kuti mulambalale zoletsa zofikira ku Notification Manager API, ndipo chachiwiri chimakupatsani mwayi wogwiritsa ntchito Notification Manager kuti mupeze ma API ena amkati omwe sapezeka mwachindunji kwa ogwiritsa ntchito. Zozindikiritsa za CVE sizinaperekedwe kuzinthuzi. Kutha kugwiritsa ntchito zofooka kudayesedwa pa LG 65SM8500PLA TV yokhala ndi firmware yozikidwa pa webOS TV 05.10.30.
Chofunikira pa chiwopsezo choyamba ndikuti mwachisawawa, kutumiza zidziwitso mu webOS kumaloledwa kuzinthu zamakina okha, koma choletsachi chikhoza kudutsidwa ndipo chidziwitso chikhoza kutumizidwa kuchokera ku pulogalamu yopanda mwayi pogwiritsa ntchito luna-send-pub command (com.webos). .lunasendpub). Chiwopsezo chachiwiri chikugwirizana ndi kuti poyimba API "luna://com.webos.notification/createAlert" ndikudina, kutsekereza kapena kulephera, mutha kuyambitsa chothandizira chilichonse, mwachitsanzo, kuyimbira pulogalamu ya Download Manager. service, yomwe imaloledwa kukhazikitsidwa mapulogalamu apadera kuti mutsitse ndikusunga mafayilo osasintha.
Source: opennet.ru