CVE-2008-4388 The LaunchObj ActiveX control before 5.2.2.865 in launcher.dll in Symantec AppStream Client 5.2.x before 5.2.2 SP3 MP1 does not properly validate downloaded files, which allows remote attackers to exe...
HighCVSS 9.3
EPSS 37.7%
Framework module
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
The LaunchObj ActiveX control before 5.2.2.865 in launcher.dll in Symantec AppStream Client 5.2.x before 5.2.2 SP3 MP1 does not properly validate downloaded files, which allows remote attackers to execute arbitrary code via the installAppMgr method and unspecified other methods.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| symantec appstream client | = 5.2 | No fix listed |
References
- 1021609 vdb-entry
- VU#194505 third-party-advisory us-government-resource
- 33247 vdb-entry
- www.symantec.com patch vendor-advisory