Skip to content
OpenAdvisories
Unscored CVE-2021-33592 EUVD-2021-20276GHSA-v67h-j6jf-6wcf

NAVER Toolbar before 4.0.30.323 allows remote attackers to execute arbitrary code via a crafted upgrade.xml file. Special characters in fil…

Published Jul 19, 2021 · Updated Aug 3, 2024 · Assigned by naver

Vendor: NAVER Product: NAVER Toolbar

Description

NAVER Toolbar before 4.0.30.323 allows remote attackers to execute arbitrary code via a crafted upgrade.xml file. Special characters in filename parameter can be the cause of bypassing code signing check function.

Affected products

VendorProductAffectedFixed
NAVER NAVER Toolbar unspecified – ≤ 4.0.30.323 —

References