CVE-2008-3436

2008-08-0114:00:00

mitre

www.cve.org

notepad++

gup

update

authenticity

man-in-the-middle

arbitrary code

trojan horse

evilgrade

dns cache poisoning

AI Score

7.4

Confidence

High

EPSS

0.002

Percentile

56.9%

JSON

The GUP generic update process in Notepad++ before 4.8.1 does not properly verify the authenticity of updates, which allows man-in-the-middle attackers to execute arbitrary code via a Trojan horse update, as demonstrated by evilgrade and DNS cache poisoning.