CVE-2020-14049 : Exploit Details and Defense Strategies

Viber for Windows up to version 13.2.0.39 is vulnerable to a security issue that could allow a malicious website to launch Viber with arbitrary parameters, potentially leading to NTLM authentication request interception.

Understanding CVE-2020-14049

This CVE identifies a vulnerability in Viber for Windows that could be exploited by a malicious actor to intercept NTLM authentication requests.

What is CVE-2020-14049?

Viber for Windows up to version 13.2.0.39 does not properly handle its custom URI handler, enabling a malicious website to manipulate Viber with arbitrary parameters.

The Impact of CVE-2020-14049

The vulnerability could result in a victim unknowingly sending an NTLM authentication request, allowing an attacker to potentially capture the hash for offline password cracking.

Technical Details of CVE-2020-14049

Viber for Windows is susceptible to exploitation due to improper handling of custom URI parameters.

Vulnerability Description

The issue arises from Viber's failure to adequately quote its custom URI handler, leaving it open to manipulation by external sources.

Affected Systems and Versions

Product: Viber for Windows
Versions affected: Up to 13.2.0.39

Exploitation Mechanism

A malicious website can launch Viber with arbitrary parameters
This can force a victim to send an NTLM authentication request
The attacker can then intercept the request or capture the hash for offline password cracking

Mitigation and Prevention

It is crucial to take immediate steps to address and prevent exploitation of this vulnerability.

Immediate Steps to Take

Avoid clicking on suspicious links or visiting untrusted websites
Regularly update Viber to the latest version
Consider using alternative communication platforms if security concerns persist

Long-Term Security Practices

Implement strong password policies and consider multi-factor authentication
Educate users on the risks of interacting with unknown or unverified sources

Patching and Updates

Stay informed about security updates and patches released by Viber
Apply updates promptly to ensure protection against known vulnerabilities