CVE-2020-9752

Naver Cloud Explorer before 2.2.2.11 allows the attacker can move a local file in any path on the filesystem as a system privilege through its named pipe...

PT-2020-20737

Name of the Vulnerable Software and Affected Versions Naver Cloud Explorer versions prior to 2.2.2.11 Description The issue allows an attacker to move a local file to any path on the filesystem with system privileges through a named pipe. Recommendations For versions prior to 2.2.2.11, update to...

CVE-2020-9752: External Control of File Name or Path

Naver Cloud Explorer before 2.2.2.11 allows the attacker can move a local file in any path on the filesystem as a system privilege through its named pipe...

CVE-2020-9751

Naver Cloud Explorer before 2.2.2.11 allows the system to download an arbitrary file from the attacker's server and execute it during the upgrade...

CVE-2020-9751

Naver Cloud Explorer before 2.2.2.11 allows the system to download an arbitrary file from the attacker's server and execute it during the upgrade...

CVE-2020-9751

Naver Cloud Explorer before 2.2.2.11 allows the system to download an arbitrary file from the attacker's server and execute it during the upgrade...

Code injection

Naver Cloud Explorer before 2.2.2.11 allows the system to download an arbitrary file from the attacker's server and execute it during the upgrade...

CVE-2020-9751

Naver Cloud Explorer before 2.2.2.11 allows the system to download an arbitrary file from the attacker's server and execute it during the upgrade...

CVE-2020-9751

CVE-2020-9751 affects Naver Cloud Explorer prior to 2.2.2.11 . The flaw allows an attacker to cause the upgrade process to download an arbitrary file from the attacker’s server and execute it. The connected documents confirm the vulnerable software and the upgrade-time arbitrary code execution ve...

PT-2020-20736

Name of the Vulnerable Software and Affected Versions Naver Cloud Explorer versions prior to 2.2.2.11 Description The issue allows an attacker to download and execute an arbitrary file from their server during the upgrade process. Recommendations For versions prior to 2.2.2.11, update to version...

CVE-2020-9751: Download of Code Without Integrity Check

Naver Cloud Explorer before 2.2.2.11 allows the system to download an arbitrary file from the attacker's server and execute it during the upgrade...

CVE-2019-13156

NDrive1.2.2.sys in Naver Cloud Explorer has a stack-based buffer overflow, which allows attackers to cause a denial of service when reading data from IOCTL handle...

Stack overflow

NDrive1.2.2.sys in Naver Cloud Explorer has a stack-based buffer overflow, which allows attackers to cause a denial of service when reading data from IOCTL handle...

CVE-2019-13156

CVE-2019-13156 affects NDrive(1.2.2).sys in Naver Cloud Explorer and is described as a stack-based buffer overflow that allows denial of service when reading data from an IOCTL handle. The connected documents consistently report this same issue across multiple sources (NVD, Red Hat, CVE lists, CN...

CVE-2019-13156

NDrive1.2.2.sys in Naver Cloud Explorer has a stack-based buffer overflow, which allows attackers to cause a denial of service when reading data from IOCTL handle...

PT-2019-13163

Name of the Vulnerable Software and Affected Versions Naver Cloud Explorer version 1.2.2 Description The issue is related to a stack-based buffer overflow in the NDrive1.2.2.sys component. This overflow occurs when reading data from an IOCTL handle, allowing attackers to cause a denial of service...

CVE-2019-13156: Stack-based Buffer Overflow

NDrive1.2.2.sys in Naver Cloud Explorer has a stack-based buffer overflow, which allows attackers to cause a denial of service when reading data from IOCTL handle...

Naver Cloud Explorer Buffer Overflow Vulnerability

Naver is a South Korean Internet content service operator. A buffer overflow vulnerability exists in the NDrive1.2.2.sys file in Naver Cloud Explorer, which can be exploited by an attacker to cause, among other things, a buffer overflow or heap overflow...