CVE-2008-4388
Symantec AppStream Client < 5.2.2 SP3 MP1 - Remote Code Execution via LaunchObj ActiveX Control
Title source: llmExploitation Summary
EIP tracks 2 public exploits for CVE-2008-4388.
PoCs published by Metasploit, MC, including Metasploit module exploits/windows/browser/symantec_appstream_unsafe.
AI-analyzed exploit summary This Metasploit module exploits a vulnerability in Symantec AppStream Client 5.x via the LaunchObj ActiveX control to download and execute arbitrary files. It uses an insecure method to achieve remote code execution in the context of the logged-on user.
Description
The LaunchObj ActiveX control before 5.2.2.865 in launcher.dll in Symantec AppStream Client 5.2.x before 5.2.2 SP3 MP1 does not properly validate downloaded files, which allows remote attackers to execute arbitrary code via the installAppMgr method and unspecified other methods.
Exploits (2)
This Metasploit module exploits a vulnerability in Symantec AppStream Client 5.x via the LaunchObj ActiveX control to download and execute arbitrary files. It uses an insecure method to achieve remote code execution in the context of the logged-on user.
This Metasploit module exploits a vulnerability in Symantec AppStream Client 5.x via the LaunchObj ActiveX control (launcher.dll 5.1.0.82). It leverages the insecure 'installAppMgr()' method to download and execute arbitrary files in the context of the logged-on user.