Lucene search
PRIOn knowledge basePRION:CVE-2008-3436HistoryAug 01, 2008 - 2:41 p.m.
Design/Logic Flaw
2008-08-0114:41:00
PRIOn knowledge base
www.prio-n.com
1
The GUP generic update process in Notepad++ before 4.8.1 does not properly verify the authenticity of updates, which allows man-in-the-middle attackers to execute arbitrary code via a Trojan horse update, as demonstrated by evilgrade and DNS cache poisoning.
| CPE | Name | Operator | Version |
|---|---|---|---|
| notepad\\+\\+ | le | 3.3 | |
| notepad\\+\\+ | le | 4.2.1 | |
| notepad\\+\\+ | le | 4.4 | |
| notepad\\+\\+ | le | 4.0.2 | |
| notepad\\+\\+ | le | 1.5 | |
| notepad\\+\\+ | le | 4.6 | |
| notepad\\+\\+ | le | 2.5 | |
| notepad\\+\\+ | le | 4.0 | |
| notepad\\+\\+ | le | 2.3 | |
| notepad\\+\\+ | le | 2.2 |
Related
cvelist
cvelist
CVE-2008-3436
2022-10-03 16:13:43
nvd
nvd
CVE-2008-3436
2008-08-01 14:41:00
cve
cve
CVE-2008-3436
2022-10-03 16:13:43