CVE-2012-5003

CVE-2012-5003 concerns nxapplet.jar in No Machine NX Web Companion 3.x and earlier. The update authenticity check is insufficient, allowing a user-assisted remote attacker to execute arbitrary code via a crafted (SiteUrl) or (RedirectUrl) parameter that points to a Trojan Horse client.zip update ...