The ActiveX control for NateOn Messenger (NateonDownloadManager.ocx) allows remote attackers to download and execute arbitrary programs by setting the arguments to the GotNate.Excute method.
http://www.securityfocus.com/bid/14974
http://securitytracker.com/id?1014987