Energizer Holdings Inc. and the Department of Homeland Security's United States Computer Emergency Readiness Team have jointly announced the discovery of a security exploit in the company's Duo charger software distribution. According to US-CERT, the application - which provides an indication of battery charge level on an attached PC - includes a backdoor that listens for incoming connections on TCP port 777. Once connected, a remote computer can access files and directories or execute programs without the local user's knowledge or authorization.
Imaging Resource | 2010-03-07