description: NAVER Toolbar before 4.0.30.323 allows remote attackers to execute arbitrary code via a crafted upgrade.xml file. Special characters in filename parameter can be the cause of bypassing code signing check function.
problem types: CWE-20: Improper Input Validation
affected:
{
product: NAVER Toolbar
vendor: NAVER
versions:
lessThanOrEqual: 4.0.30.323, status: affected, version: unspecified, versionType: custom
}