CVE-2008-4388
50Vexday Risk Score
Patch soon. It has a working public exploit.
ssvc Attendepss 38%
from disclosure to weapon673 days
Published on NVDJan 20
1st PoC+673d
metasploitJan 15
exploitation probability
38%top 2% of all CVEs
observed exploitation
nono source reports it
1 public exploit(s)
The LaunchObj ActiveX control before 5.2.2.865 in launcher.dll in Symantec AppStream Client 5.2.x before 5.2.2 SP3 MP1 does not properly validate downloaded files, which allows remote attackers to execute arbitrary code via the installAppMgr method and unspecified other methods.
Affected products
n/a · n/apublic PoCs found — 1
exploitdbwww.exploit-db.com/exploits/16512unverified⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.