Lucene search

K
cvelistMitreCVELIST:CVE-2008-3435
HistoryAug 01, 2008 - 2:00 p.m.

CVE-2008-3435

2008-08-0114:00:00
mitre
www.cve.org
linkedin toolbar
update authenticity
arbitrary code

AI Score

7.4

Confidence

High

EPSS

0.002

Percentile

56.9%

LinkedIn Browser Toolbar 3.0.3.1100 and earlier does not properly verify the authenticity of updates, which allows man-in-the-middle attackers to execute arbitrary code via a Trojan horse update, as demonstrated by evilgrade and DNS cache poisoning.

AI Score

7.4

Confidence

High

EPSS

0.002

Percentile

56.9%

Related for CVELIST:CVE-2008-3435