Dead Popcorn Time Updater Put Millions of Computers at Risk of Takeover

A vulnerability in the Popcorn Time updater has put millions of computers at risk of being taken over. The updater runs with full privileges at system boot and periodically checks for updates, executing any code it receives. This creates an opportunity for malicious code to be executed, potentially allowing attackers to gain control of affected systems. The updater's design allows it to run with elevated privileges, increasing the potential impact of a successful attack. The vulnerability exists because the updater executes code from a remote domain without proper validation. This setup makes it possible for an attacker to serve malicious code to vulnerable systems.