Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2019-12805

Опубликовано: 09 авг. 2019
Источник: nvd
CVSS3: 8.8
CVSS3: 8.8
CVSS2: 6.8
EPSS Низкий

Описание

NCSOFT Game Launcher, NC Launcher2 2.4.1.691 and earlier versions have a vulnerability in the custom protocol handler that could allow remote attacker to execute arbitrary command. User interaction is required to exploit this vulnerability in that the target must visit a malicious web page. This can be leveraged for code execution in the context of the current user.

Уязвимые конфигурации

Конфигурация 1
cpe:2.3:a:ncsoft:nc_launcher2:*:*:*:*:*:*:*:*
Версия до 2.4.1.691 (включая)

EPSS

Процентиль: 85%
0.02413
Низкий

8.8 High

CVSS3

8.8 High

CVSS3

6.8 Medium

CVSS2

Дефекты

CWE-77
CWE-77

Связанные уязвимости

CVSS3: 8.8
github
больше 3 лет назад

NCSOFT Game Launcher, NC Launcher2 2.4.1.691 and earlier versions have a vulnerability in the custom protocol handler that could allow remote attacker to execute arbitrary command. User interaction is required to exploit this vulnerability in that the target must visit a malicious web page. This can be leveraged for code execution in the context of the current user.

EPSS

Процентиль: 85%
0.02413
Низкий

8.8 High

CVSS3

8.8 High

CVSS3

6.8 Medium

CVSS2

Дефекты

CWE-77
CWE-77