PT-2005-3942 · Nateon · Nateon Messenger

Gyu Tae + 2 · Publicado 2005-09-30 · Atualizado 2016-10-18 · CVE-2005-3113

Positive Technologies (AI Summary)

CVSS v2.0

7.5

Alta

Vetor base

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions NateOn Messenger (affected versions not specified)

Description The issue concerns the ActiveX control NateOn Messenger, specifically the NateonDownloadManager.ocx component. It allows remote attackers to download and execute arbitrary programs. This is achieved by setting specific arguments to the GotNate.Excute method.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Identificadores relacionados

CVE-2005-3113

Produtos afetados

Nateon Messenger

Referências · 5

• http://securitytracker.com/id?1014987 · Nota
• http://marc.info/?l=full-disclosure&m=112796492819343&w=2 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2005-3113 · Nota de Segurança
• http://securityfocus.com/bid/14974 · Nota
• http://secunia.com/advisories/16983 · Nota