Remote Code Execution Vulnerability in Tencent WeChat

CVE-2019-17151

What is CVE-2019-17151?

This vulnerability in Tencent WeChat allows remote attackers to redirect users to external resources on installations prior to version 7.0.9. Exploitation necessitates that the target is in an active chat session with the attacker. The underlying issue is tied to improper validation of user names within profile parsing, which may be exploited in combination with other security flaws to potentially execute code within the context of the current process. For more information, refer to the advisory at Zero Day Initiative.

References