CVE-2012-5003
First published: Wed Sep 19 2012(Updated: )
nxapplet.jar in No Machine NX Web Companion 3.x and earlier does not properly verify the authenticity of updates, which allows user-assisted remote attackers to execute arbitrary code via a crafted (1) SiteUrl or (2) RedirectUrl parameter that points to a Trojan Horse client.zip update file.
Credit: cve@mitre.org
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Nomachine Nx Web Companion | <=3.5.0-2 | |
| Nomachine Nx Web Companion | =1.5.0-beta2 | |
| Nomachine Nx Web Companion | =1.5.0-beta3 | |
| Nomachine Nx Web Companion | =2.0.0-1 | |
| Nomachine Nx Web Companion | =2.1.0-1 | |
| Nomachine Nx Web Companion | =3.0.0-1 | |
| Nomachine Nx Web Companion | =3.0.0-2 | |
| Nomachine Nx Web Companion | =3.0.0-3 | |
| Nomachine Nx Web Companion | =3.0.0-4 | |
| Nomachine Nx Web Companion | =3.0.0-5 | |
| Nomachine Nx Web Companion | =3.1.0-1 | |
| Nomachine Nx Web Companion | =3.2.0-1 | |
| Nomachine Nx Web Companion | =3.3.0-1 | |
| Nomachine Nx Web Companion | =3.3.0-2 | |
| Nomachine Nx Web Companion | =3.4.0-1 | |
| Nomachine Nx Web Companion | =3.4.0-2 | |
| Nomachine Nx Web Companion | =3.4.0-3 | |
| Nomachine Nx Web Companion | =3.5.0-1 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- agent/author
- agent/description
- agent/event
- agent/first-publish-date
- agent/last-modified-date
- agent/references
- agent/severity
- agent/softwarecombine
- agent/tags
- agent/type
- agent/weakness
- collector/nvd-index
- vendor/nomachine
- canonical/nomachine nx web companion
- version/nomachine nx web companion/3.5.0-2
- version/nomachine nx web companion/1.5.0-beta2
- version/nomachine nx web companion/1.5.0-beta3
- version/nomachine nx web companion/2.0.0-1
- version/nomachine nx web companion/2.1.0-1
- version/nomachine nx web companion/3.0.0-1
- version/nomachine nx web companion/3.0.0-2
- version/nomachine nx web companion/3.0.0-3
- version/nomachine nx web companion/3.0.0-4
- version/nomachine nx web companion/3.0.0-5
- version/nomachine nx web companion/3.1.0-1
- version/nomachine nx web companion/3.2.0-1
- version/nomachine nx web companion/3.3.0-1
- version/nomachine nx web companion/3.3.0-2
- version/nomachine nx web companion/3.4.0-1
- version/nomachine nx web companion/3.4.0-2
- version/nomachine nx web companion/3.4.0-3
- version/nomachine nx web companion/3.5.0-1