What is CVE-2008-4388?

CVE-2008-4388 is a vulnerability in Symantec Appstream Client, classified under Improper Input Validation. Published 2009-01-20.

Is CVE-2008-4388 known to be exploited?

1 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.

Improper input validation in Symantec Appstream Client

CVE-2008-4388

The LaunchObj ActiveX control before 5.2.2.865 in launcher.dll in Symantec AppStream Client 5.2.x before 5.2.2 SP3 MP1 does not properly validate downloaded files, which allows remote attackers to execute arbitrary code via the installAppMgr method and unspecified other methods.

Vulnerability class: Drupalgeddon 2 (CVE-2018-7600)

EPSS: 0.377 (98.4th percentile) — read the EPSS interpretation.

Affected products

Symantec Appstream_client — versions 5.2
N/a — versions n/a

Weakness classification (CWE)

CWE-20 — Improper Input Validation

Public proof-of-concept exploits

rapid7/metasploit-framework

References

cret@cert.org (US Government Resource, x_refsource_CERT-VN, third-party-advisory)
cret@cert.org (x_refsource_CONFIRM, Patch, Vendor Advisory)
cret@cert.org (vdb-entry, x_refsource_BID)
cret@cert.org (vdb-entry, x_refsource_SECTRACK)

Frequently asked questions

What is CVE-2008-4388?: CVE-2008-4388 is a vulnerability in Symantec Appstream Client, classified under Improper Input Validation. Published 2009-01-20.
Is CVE-2008-4388 known to be exploited?: 1 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.