A vulnerability has been identified in Windows NetMeeting, which can be exploited by malicious people to overwrite arbitrary files on a user's system with the privileges of the user.

The vulnerability is caused due to an input validation error in the file transfer functionality. By specifying a filename starting with the character sequence "..\", it is possible to traverse out of the directory used to receive files. This could potentially overwrite other files on a user's system, which may result in execution of arbitrary code.

The vulnerability has been reported in version 3.01 (4.4.3385). However, other versions may also be vulnerable.

Solution
Reportedly, the vulnerability has been fixed in Windows 2000 SP4 and Windows XP SP1.
Further details available to Secunia VIM customers

Provided and/or discovered by
Hernán Ochoa, Gustavo Ajzenman, Javier Garcia Di Palma, and Pablo Rubinstein (Core Security Technologies).

Original Advisory
http://www.coresecurity.com/common/showdoc.php?idx=352&idxseccion=10

Deep Links
Links available to Secunia VIM customers