NC Launcher 2 Arbitrary Command Injection Vulnerability

NCSOFT Game Launcher, NC Launcher2 2.4.1.691 and earlier versions have a vulnerability in the custom protocol handler that could allow remote attacker to execute arbitrary command. User interaction is required to exploit this vulnerability in that the target must visit a malicious web page. This can be leveraged for code execution in the context of the current user.

N/A

在命令中使用的特殊元素转义处理不恰当(命令注入)

NC Launcher2 命令注入漏洞

NC Launcher2是一款游戏启动器。 NNC Launcher2 2.4.1.691及之前版本中的custom protocol handler存在命令注入漏洞。攻击者可借助恶意的页面利用该漏洞执行任意命令。

N/A

N/A