Security team: Recently, there is an rce vulnerability in the COREMAIL email client of windows, which may lead to the disclosure of the private key of the wallet

According to Chengdu chain safety chain must know - Micro step dynamic display monitored by blockchain security public opinion platform , In the near future Windows edition Coremail Mail client exists RCE（ Remote code execution ） Loophole , The vulnerability exploitation process is simple and stable . An attacker can completely control the victim's host by executing arbitrary code , Thus endangering the wallet security on the user's host . After analysis and verification , An attacker can send a crafted email to the victim , If the victim uses Coremail The client opens the mail , You can automatically run the malicious executable program in the email attachment . There is no need for the victim to click on any links or attachments in the email during the whole process , Open the email and you will be caught . It is reported that , The affected version of this vulnerability is Coremail Air client 3.0.5 Version and above ,3.1.0.303（ Not included ） The following versions . I would like to remind you to pay attention to the safety of your wallet ： Messages and attachments from unknown sources 、 Please don't click the link at will ; And will Coremail Upgrade the mail client to the latest version .