Test ID:	1.3.6.1.4.1.25623.1.0.113767
Category:	General
Title:	Telegram Desktop <= 2.1.13 Protection Mechanism Bypass Vulnerability - Windows
Summary:	Telegram Desktop is prone to a protection mechanism bypass; vulnerability.
Description:	Summary: Telegram Desktop is prone to a protection mechanism bypass vulnerability. Vulnerability Insight: Telegram Desktop allows a spoofed file type to bypass the Dangerous File Type Execution protection mechanism, by using the chat windows with a filename that lacks an extension. Vulnerability Impact: Successful exploitation would for example allow an attacker to execute arbitrary code on the target machine by sending a malicious file to the victim. Affected Software/OS: Telegram Desktop through version 2.1.13. Solution: Update to version 2.2.0 or later. CVSS Score: 6.8 CVSS Vector: AV:N/AC:M/Au:N/C:P/I:P/A:P
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2020-17448 https://security.gentoo.org/glsa/202101-34 https://github.com/VijayT007/Vulnerability-Database/blob/master/Telegram-CVE-2020-17448 https://github.com/telegramdesktop/tdesktop/releases/tag/v2.2.0 https://telegram.org
Copyright	Copyright (C) 2020 Greenbone AG

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.