CVE-2008-4388

CVE-2008-4388 affects Symantec AppStream Client 5.x with the LaunchObj ActiveX control (launcher.dll) prior to 5.2.2 SP3 MP1. The issue arises in the installAppMgr() method (and unspecified other methods), where downloaded files are not properly validated, enabling remote code execution via a cra...