PT-2005-3942 · Nateon · Nateon Messenger

Gyu Tae + 2 · Published 2005-09-30 · Updated 2016-10-18 · CVE-2005-3113

Positive Technologies (AI Summary)

CVSS v2.0

7.5

High

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions NateOn Messenger (affected versions not specified)

Description The issue concerns the ActiveX control NateOn Messenger, specifically the NateonDownloadManager.ocx component. It allows remote attackers to download and execute arbitrary programs. This is achieved by setting specific arguments to the GotNate.Excute method.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Related Identifiers

CVE-2005-3113

Affected Products

Nateon Messenger

References · 5

• https://nvd.nist.gov/vuln/detail/CVE-2005-3113 · Security Note
• http://securitytracker.com/id?1014987 · Note
• http://marc.info/?l=full-disclosure&m=112796492819343&w=2 · Note
• http://securityfocus.com/bid/14974 · Note
• http://secunia.com/advisories/16983 · Note