Skip to content
CVE PROGRAM SOURCE RECORD8.8 High

CVE-2019-12805

NC Launcher 2 Arbitrary Command Injection Vulnerability

Description

NCSOFT Game Launcher, NC Launcher2 2.4.1.691 and earlier versions have a vulnerability in the custom protocol handler that could allow remote attacker to execute arbitrary command. User interaction is required to exploit this vulnerability in that the target must visit a malicious web page. This can be leveraged for code execution in the context of the current user.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

NCSOFT NC Launcher2

  • 2.4.1.691 and earlieraffected

References