WhatsApp Desktop for Windows Spoofing Vulnerability Allowing Arbitrary Code Execution

A spoofing vulnerability has been identified in WhatsApp Desktop for Windows, affecting versions prior to 2.2450.6. The issue arises because the application displayed attachments based on their MIME type but determined the file opening method according to the attachment's filename extension. This mismatch could have been exploited to trick users into executing arbitrary code instead of simply viewing the attachment when it was manually opened within WhatsApp.

Impact

Exploitation of this vulnerability could lead to unintended execution of arbitrary code on the user's system.