CVE-2020-16087: Improper Neutralization of Special Elements in Output Used by a Downstream Component

An issue was discovered in Zalo.exe in VNG Zalo Desktop 19.8.1.0. An attacker can run arbitrary commands on a remote Windows machine running the Zalo client by sending the user of the device a crafted file...