Description (CNA)
MyBrowserPlus downloads the files needed to run the program through the setup file (Setup.inf). At this time, there is a vulnerability in downloading arbitrary files due to insufficient integrity verification of the files.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| ActiveSoft / MyBrowserPlus | affected 6.2.2018.529 through 6.2.2018.529 |
CWE
CWE-494
References
- http://www.activesoft.co.kr/demo.html
- https://www.boho.or.kr/krcert/secNoticeView.do?bulletin_writing_sequence=35549
ADP enrichment
No English description supplied.