CVE-2021-33592

Summary

NAVER Toolbar before 4.0.30.323 allows remote attackers to execute arbitrary code via a crafted upgrade.xml file. Special characters in filename parameter can be the cause of bypassing code signing check function.

Affected Software

VendorProductVersion RangeStatus
NAVERNAVER Toolbarunspecified <= 4.0.30.323affected

Weaknesses

  • CWE-20: CWE-20: Improper Input Validation

ADP Enrichment

CVE Program Container

Additional References

References