NetSight
IP …
high7.5

CVE-2008-3436

The GUP generic update process in Notepad++ before 4.8.1 does not properly verify the authenticity of updates, which allows man-in-the-middle attackers to exec…

Impact

The GUP generic update process in Notepad++ before 4.8.1 does not properly verify the authenticity of updates, which allows man-in-the-middle attackers to execute arbitrary code via a Trojan horse update, as demonstrated by evilgrade and DNS cache poisoning.

Affected products

VendorProductAffected versions
Notepad\+\+Notepad\+\+
through 1.0
through 1.1
through 1.2
through 1.3
through 1.4
through 1.5

Weakness classification

CWE-94

References