Unrated severityNVD Advisory· Published Aug 7, 2015· Updated May 6, 2026
CVE-2015-4674
CVE-2015-4674
Description
The autoupdate implementation in TimeDoctor Pro 1.4.72.3 on Windows relies on unsigned installer files that are retrieved without use of SSL, which makes it easier for man-in-the-middle attackers to execute arbitrary code via a crafted file.
Affected products
1- cpe:2.3:a:timedoctor:timedoctor:1.4.72.3:*:*:*:pro:*:*:*
Patches
0No patches discovered yet.
Vulnerability mechanics
AI mechanics synthesis has not run for this CVE yet.
References
3News mentions
0No linked articles in our index yet.