RevoWorks Products Incorrect Resource Transfer Vulnerability Allowing Malicious File Downloads

A vulnerability exists in RevoWorks SCVX and RevoWorks Browser that allows for incorrect resource transfer between isolated environments, potentially leading to the download of malicious files. This issue affects RevoWorks SCVX versions 4.0.234 and earlier, as well as 5.0.7 and earlier. In RevoWorks Browser, the vulnerability is present in versions 2.2.100 and earlier, and 3.0.1 and earlier.

Impact

Exploitation of this vulnerability could result in the unintended download of harmful files to the user's system.

Remediation

Users of RevoWorks SCVX should apply the latest patch and update to version 5.0.16_446. RevoWorks Browser users should update to version 2.2.101 or 3.0.2, depending on their current version.