Description (CNA)
NAVER Toolbar before 4.0.30.323 allows remote attackers to execute arbitrary code via a crafted upgrade.xml file. Special characters in filename parameter can be the cause of bypassing code signing check function.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| NAVER / NAVER Toolbar | affected unspecified through 4.0.30.323 |
CWE
CWE-20
References
ADP enrichment
No English description supplied.