CVE-2012-5003

nxapplet.jar in No Machine NX Web Companion 3.x and earlier does not properly verify the authenticity of updates, which allows user-assisted remote attackers to execute arbitrary code via a crafted (1) SiteUrl or (2) RedirectUrl parameter that points to a Trojan Horse client.zip update file.
Advertisement

NeevaHost hosting service

Configurations

Configuration 1 (hide)

OR cpe:2.3:a:nomachine:nx_web_companion:3.2.0-1:*:*:*:*:*:*:*
cpe:2.3:a:nomachine:nx_web_companion:3.1.0-1:*:*:*:*:*:*:*
cpe:2.3:a:nomachine:nx_web_companion:2.0.0-1:*:*:*:*:*:*:*
cpe:2.3:a:nomachine:nx_web_companion:1.5.0:beta3:*:*:*:*:*:*
cpe:2.3:a:nomachine:nx_web_companion:3.0.0-5:*:*:*:*:*:*:*
cpe:2.3:a:nomachine:nx_web_companion:3.0.0-4:*:*:*:*:*:*:*
cpe:2.3:a:nomachine:nx_web_companion:1.5.0:beta2:*:*:*:*:*:*
cpe:2.3:a:nomachine:nx_web_companion:3.0.0-3:*:*:*:*:*:*:*
cpe:2.3:a:nomachine:nx_web_companion:3.0.0-2:*:*:*:*:*:*:*
cpe:2.3:a:nomachine:nx_web_companion:3.4.0-2:*:*:*:*:*:*:*
cpe:2.3:a:nomachine:nx_web_companion:3.4.0-1:*:*:*:*:*:*:*
cpe:2.3:a:nomachine:nx_web_companion:3.0.0-1:*:*:*:*:*:*:*
cpe:2.3:a:nomachine:nx_web_companion:3.5.0-1:*:*:*:*:*:*:*
cpe:2.3:a:nomachine:nx_web_companion:3.4.0-3:*:*:*:*:*:*:*
cpe:2.3:a:nomachine:nx_web_companion:3.3.0-1:*:*:*:*:*:*:*
cpe:2.3:a:nomachine:nx_web_companion:3.3.0-2:*:*:*:*:*:*:*
cpe:2.3:a:nomachine:nx_web_companion:2.1.0-1:*:*:*:*:*:*:*
cpe:2.3:a:nomachine:nx_web_companion:*:*:*:*:*:*:*:*

Information

Published : 2012-09-19 14:55

Updated : 2017-08-28 18:32


NVD link : CVE-2012-5003

Mitre link : CVE-2012-5003


JSON object : View

CWE
CWE-287

Improper Authentication

Advertisement

dedicated server usa

Products Affected

nomachine

  • nx_web_companion