CVE-2008-4388

EUVD-2008-4369
The LaunchObj ActiveX control before 5.2.2.865 in launcher.dll in Symantec AppStream Client 5.2.x before 5.2.2 SP3 MP1 does not properly validate downloaded files, which allows remote attackers to execute arbitrary code via the installAppMgr method and unspecified other methods.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
9.3 UNKNOWN
NETWORK
MEDIUM
AV:N/AC:M/Au:N/C:C/I:C/A:C
Base Score
CVSS 3.x
EPSS Score
Percentile: 98%
Affected Products (NVD)
VendorProductVersion
symantecappstream_client
5.2
𝑥
= Vulnerable software versions
Common Weakness Enumeration
References
http://securitytracker.com/id?1021609
http://www.kb.cert.org/vuls/id/194505
http://www.securityfocus.com/bid/33247
http://www.symantec.com/avcenter/security/Content/2009.01.15.html
http://securitytracker.com/id?1021609
http://www.kb.cert.org/vuls/id/194505
http://www.securityfocus.com/bid/33247
http://www.symantec.com/avcenter/security/Content/2009.01.15.html