CVE-2008-3436
Description
The GUP generic update process in Notepad++ before 4.8.1 does not properly verify the authenticity of updates, which allows man-in-the-middle attackers to execute arbitrary code via a Trojan horse update, as demonstrated by evilgrade and DNS cache poisoning.
Risk Information
Base Score
8.1
MODERATE
Vector
AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
EPSS Score
Exploitation Probability
0.651
Associated Vulnerability
| Vulnerability | OS Platform |
|---|---|
| Vulnerabilities CVE-2007-2666,CVE-2008-3436 are affected in Notepad++ (User Based) 4.1.1 | Windows |
| Vulnerabilities CVE-2008-3436 are affected in Notepad++ (User Based) 1.0 | Windows |
| Vulnerabilities CVE-2008-3436 are affected in Notepad++ (User Based) 1.1 | Windows |
| Vulnerabilities CVE-2008-3436 are affected in Notepad++ (User Based) 1.2 | Windows |
| Vulnerabilities CVE-2008-3436 are affected in Notepad++ (User Based) 1.3 | Windows |
| Vulnerabilities CVE-2008-3436 are affected in Notepad++ (User Based) 1.4 | Windows |
| Vulnerabilities CVE-2008-3436 are affected in Notepad++ (User Based) 1.5 | Windows |
| Vulnerabilities CVE-2008-3436 are affected in Notepad++ (User Based) 1.6 | Windows |
| Vulnerabilities CVE-2008-3436 are affected in Notepad++ (User Based) 1.7 | Windows |
| Vulnerabilities CVE-2008-3436 are affected in Notepad++ (User Based) 1.8 | Windows |
| Vulnerabilities CVE-2008-3436 are affected in Notepad++ (User Based) 1.9 | Windows |
| Vulnerabilities CVE-2008-3436 are affected in Notepad++ (User Based) 2.1 | Windows |
| Vulnerabilities CVE-2008-3436 are affected in Notepad++ (User Based) 2.2 | Windows |
| Vulnerabilities CVE-2008-3436 are affected in Notepad++ (User Based) 2.3 | Windows |
| Vulnerabilities CVE-2008-3436 are affected in Notepad++ (User Based) 2.4 | Windows |
| Vulnerabilities CVE-2008-3436 are affected in Notepad++ (User Based) 2.5 | Windows |
| Vulnerabilities CVE-2008-3436 are affected in Notepad++ (User Based) 2.6 | Windows |
| Vulnerabilities CVE-2008-3436 are affected in Notepad++ (User Based) 2.8 | Windows |
| Vulnerabilities CVE-2008-3436 are affected in Notepad++ (User Based) 2.9 | Windows |
| Vulnerabilities CVE-2008-3436 are affected in Notepad++ (User Based) 3.0 | Windows |
| Vulnerabilities CVE-2008-3436 are affected in Notepad++ (User Based) 3.1 | Windows |
| Vulnerabilities CVE-2008-3436 are affected in Notepad++ (User Based) 3.2 | Windows |
| Vulnerabilities CVE-2008-3436 are affected in Notepad++ (User Based) 3.3 | Windows |
| Vulnerabilities CVE-2008-3436 are affected in Notepad++ (User Based) 3.4 | Windows |
| Vulnerabilities CVE-2008-3436 are affected in Notepad++ (User Based) 3.5 | Windows |
| Vulnerabilities CVE-2008-3436 are affected in Notepad++ (User Based) 3.6 | Windows |
| Vulnerabilities CVE-2008-3436 are affected in Notepad++ (User Based) 3.7 | Windows |
| Vulnerabilities CVE-2008-3436 are affected in Notepad++ (User Based) 3.8 | Windows |
| Vulnerabilities CVE-2008-3436 are affected in Notepad++ (User Based) 3.9 | Windows |
| Vulnerabilities CVE-2008-3436 are affected in Notepad++ (User Based) 4.0 | Windows |
| Vulnerabilities CVE-2008-3436 are affected in Notepad++ (User Based) 4.0.2 | Windows |
| Vulnerabilities CVE-2008-3436 are affected in Notepad++ (User Based) 4.1 | Windows |
| Vulnerabilities CVE-2008-3436 are affected in Notepad++ (User Based) 4.1.2 | Windows |
| Vulnerabilities CVE-2008-3436 are affected in Notepad++ (User Based) 4.2.1 | Windows |
| Vulnerabilities CVE-2008-3436 are affected in Notepad++ (User Based) 4.2.2 | Windows |
| Vulnerabilities CVE-2008-3436 are affected in Notepad++ (User Based) 4.3 | Windows |
| Vulnerabilities CVE-2008-3436 are affected in Notepad++ (User Based) 4.4 | Windows |
| Vulnerabilities CVE-2008-3436 are affected in Notepad++ (User Based) 4.5 | Windows |
| Vulnerabilities CVE-2008-3436 are affected in Notepad++ (User Based) 4.6 | Windows |
| Vulnerabilities CVE-2008-3436 are affected in Notepad++ (User Based) 4.7 | Windows |
| Vulnerabilities CVE-2008-3436 are affected in Notepad++ (User Based) 4.7.2 | Windows |
Patch Details
No records foundReferences
https://nvd.nist.gov/vuln/detail/CVE-2023-1234
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1234