CVE-2008-4388

Name of the Vulnerable Software and Affected Versions Symantec AppStream Client versions prior to 5.2.2 SP3 MP1

Description The issue is related to the LaunchObj ActiveX control in the launcher.dll component, which does not properly validate downloaded files. This allows remote attackers to execute arbitrary code via the installAppMgr method and other unspecified methods.

Recommendations For Symantec AppStream Client versions prior to 5.2.2 SP3 MP1, update to version 5.2.2 SP3 MP1 or later to resolve the issue. As a temporary workaround, consider restricting access to the installAppMgr method and other vulnerable methods in the LaunchObj ActiveX control until a patch is applied.