NVD

Id
4214  
Name
CVE-2008-4388  
Description
The LaunchObj ActiveX control before 5.2.2.865 in launcher.dll in Symantec AppStream Client 5.2.x before 5.2.2 SP3 MP1 does not properly validate downloaded files, which allows remote attackers to execute arbitrary code via the installAppMgr method and unspecified other methods.  
Reject
 
CVSS Version
2  
CVSS Score
9.3  
Severity
High  
CVSS Base Score
9.3  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:C/I:C/A:C)  
Pub Date
2017-01-03  
Published
2009-01-20  
Modified Date
2009-05-18  
Seq
2008-4388  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
26789 4214 CVE-2008-4388 1021609  View
26790 4214 CVE-2008-4388 VU#194505  View
26791 4214 CVE-2008-4388 33247  View
26792 4214 CVE-2008-4388 http://www.symantec.com/avcenter/security/Content/2009.01.15.html  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
40686 JVNDB-2009-001692 Symantec AppStream Client の launcher.dll の LaunchObj ActiveX コントロールにおける任意のコードを実行される脆弱性 Symantec AppStream Client の launcher.dll の LaunchObj ActiveX コントロールは、ダウンロードファイルの検証を適切に行わないため、任意のコードを実行される脆弱性が存在します。 CVE-2008-4388 34501 CVE-2008-4388 4214 9.3 http://jvndb.jvn.jp/ja/contents/2009/JVNDB-2009-001692.html 2009-01-20 2009-07-08 View