CVE-2008-3436 The GUP generic update process in Notepad++ before 4.8.1 does not properly verify the authenticity of updates, which allows man-in-the-middle attackers to execute arbitrary code via a Trojan horse upd...
HighCVSS 7.5
EPSS 1.8%
- Published
- Updated
- Exploit status
- No public exploit known
Description
The GUP generic update process in Notepad++ before 4.8.1 does not properly verify the authenticity of updates, which allows man-in-the-middle attackers to execute arbitrary code via a Trojan horse update, as demonstrated by evilgrade and DNS cache poisoning.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| notepad++ | <= 1.0 | No fix listed |
| notepad++ | <= 1.1 | No fix listed |
| notepad++ | <= 1.2 | No fix listed |
| notepad++ | <= 1.3 | No fix listed |
| notepad++ | <= 1.4 | No fix listed |
| notepad++ | <= 1.5 | No fix listed |
| notepad++ | <= 1.6 | No fix listed |
| notepad++ | <= 1.7 | No fix listed |
| notepad++ | <= 1.8 | No fix listed |
| notepad++ | <= 1.9 | No fix listed |
| notepad++ | <= 2.1 | No fix listed |
| notepad++ | <= 2.2 | No fix listed |
| notepad++ | <= 2.3 | No fix listed |
| notepad++ | <= 2.4 | No fix listed |
| notepad++ | <= 2.5 | No fix listed |
| notepad++ | <= 2.6 | No fix listed |
| notepad++ | <= 2.8 | No fix listed |
| notepad++ | <= 2.9 | No fix listed |
| notepad++ | <= 3.0 | No fix listed |
| notepad++ | <= 3.1 | No fix listed |
| notepad++ | <= 3.2 | No fix listed |
| notepad++ | <= 3.3 | No fix listed |
| notepad++ | <= 3.4 | No fix listed |
| notepad++ | <= 3.5 | No fix listed |
| notepad++ | <= 3.6 | No fix listed |
Show 16 more
| Product | Affected versions | Fixed in |
|---|---|---|
| notepad++ | <= 3.7 | No fix listed |
| notepad++ | <= 3.8 | No fix listed |
| notepad++ | <= 3.9 | No fix listed |
| notepad++ | <= 4.0 | No fix listed |
| notepad++ | <= 4.0.2 | No fix listed |
| notepad++ | <= 4.1 | No fix listed |
| notepad++ | <= 4.1.1 | No fix listed |
| notepad++ | <= 4.1.2 | No fix listed |
| notepad++ | <= 4.2.1 | No fix listed |
| notepad++ | <= 4.2.2 | No fix listed |
| notepad++ | <= 4.3 | No fix listed |
| notepad++ | <= 4.4 | No fix listed |
| notepad++ | <= 4.5 | No fix listed |
| notepad++ | <= 4.6 | No fix listed |
| notepad++ | <= 4.7 | No fix listed |
| notepad++ | <= 4.7.2 | No fix listed |