Unrated severityNVD Advisory· Published Jan 20, 2009· Updated Jun 16, 2026

CVE-2008-4388

Description

The LaunchObj ActiveX control before 5.2.2.865 in launcher.dll in Symantec AppStream Client 5.2.x before 5.2.2 SP3 MP1 does not properly validate downloaded files, which allows remote attackers to execute arbitrary code via the installAppMgr method and unspecified other methods.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Symantec/Appstream2 versions
cpe:2.3:a:symantec:appstream_client:5.2:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:symantec:appstream_client:5.2:*:*:*:*:*:*:*
- (no CPE)range: <5.2.2 SP3 MP1

Patches

Vulnerability mechanics

References

www.symantec.com/avcenter/security/Content/2009.01.15.htmlnvdPatchVendor Advisory
www.kb.cert.org/vuls/id/194505nvdUS Government Resource
securitytracker.com/idnvd
www.securityfocus.com/bid/33247nvd

News mentions

No linked articles in our index yet.

cvss	0.000
epss	0.030
exploit	0.030
kev	0.000
patch	0.000
ransomware	0.000