JVN#47875752 GungHo LoadPrgAx vulnerable to arbitrary Java program execution

LoadPrgAx from GungHo Online Entertainment, Inc. is an ActiveX control that runs games provided by the company. LoadPrgAx contains a vulnerability that allows an attacker to execute an arbitrary Java program that resides on a user’s PC.

Impact

If a user views a specially crafted HTML document (web pages or HTML email), an arbitrary Java program on the user’s PC could be executed.

Solution

Update the Software
Update to the latest version provided by the vendor.

Products Affected

• LoadPrgAx version 1,0,0,6 and earlier