High severity8.8NVD Advisory· Published Aug 9, 2019· Updated Jun 17, 2026
CVE-2019-12805
CVE-2019-12805
Description
NCSOFT Game Launcher, NC Launcher2 2.4.1.691 and earlier versions have a vulnerability in the custom protocol handler that could allow remote attacker to execute arbitrary command. User interaction is required to exploit this vulnerability in that the target must visit a malicious web page. This can be leveraged for code execution in the context of the current user.
Affected products
4- Range: <=2.4.1.691
<=2.4.1.691+ 2 more
- (no CPE)range: <=2.4.1.691
- cpe:2.3:a:ncsoft:nc_launcher2:*:*:*:*:*:*:*:*range: <=2.4.1.691
- (no CPE)range: 2.4.1.691 and earlier
Patches
Vulnerability mechanics
References
1- www.boho.or.kr/krcert/secNoticeView.donvdThird Party AdvisoryVDB Entry
News mentions
0No linked articles in our index yet.