Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
cve[email protected]CVE-2008-4388
HistoryJan 20, 2009 - 4:30 p.m.

CVE-2008-4388

2009-01-2016:30:00
CWE-20
[email protected]
web.nvd.nist.gov
118
cve-2008-4388
symantec
appstream client
remote code execution
activex
security vulnerability

7.5 High

AI Score

Confidence

Low

9.3 High

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

0.937 High

EPSS

Percentile

99.1%

JSON

The LaunchObj ActiveX control before 5.2.2.865 in launcher.dll in Symantec AppStream Client 5.2.x before 5.2.2 SP3 MP1 does not properly validate downloaded files, which allows remote attackers to execute arbitrary code via the installAppMgr method and unspecified other methods.

Related

saint 4
seebug 1
d2 1
prion 1
packetstorm 1
cert 1
symantec 1
nessus 1
cvelist 1
checkpoint_advisories 3
saint
saint
Symantec AppStream Client LaunchObj ActiveX Control installAppMgr vulnerability
2009-03-31 00:00:00
Symantec AppStream Client LaunchObj ActiveX Control installAppMgr vulnerability
2009-03-31 00:00:00
Symantec AppStream Client LaunchObj ActiveX Control installAppMgr vulnerability
2009-03-31 00:00:00
seebug
seebug
Symantec AppStream客户端LaunchObj ActiveX控件任意文件下载漏洞
2009-01-16 00:00:00
d2
d2
DSquare Exploit Pack: D2SEC_APPSTREAM
2009-01-20 16:30:00
prion
prion
Code injection
2009-01-20 16:30:00
packetstorm
packetstorm
Symantec AppStream LaunchObj ActiveX Control Arbitrary File Download and Execute.
2009-11-26 00:00:00
cert
cert
Symantec AppStream LaunchObj ActiveX control vulnerable to arbitrary code download and execution
2009-01-15 00:00:00
symantec
symantec
Symantec AppStream ActiveX Unauthorized Access
2009-01-15 08:00:00
nessus
nessus
Symantec AppStream Client LaunchObj ActiveX Control Multiple Unsafe Methods (SYM09-001)
2009-01-17 00:00:00
cvelist
cvelist
CVE-2008-4388
2022-10-03 16:13:57
checkpoint_advisories
checkpoint_advisories
Symantec AppStream Client LaunchObj ActiveX Control Code Execution (CVE-2008-4388)
2012-04-16 00:00:00
Update Protection against Symantec AppStream Client LaunchObj ActiveX Control Program Execution
2009-01-23 00:00:00
Symantec AppStream Client LaunchObj ActiveX Control (CVE-2008-4388)
2010-05-16 00:00:00

7.5 High

AI Score

Confidence

Low

9.3 High

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

0.937 High

EPSS

Percentile

99.1%

JSON
Related for CVE-2008-4388
saint4seebug1d21prion1packetstorm1cert1symantec1nessus1cvelist1checkpoint_advisories3