NetSight
IP …
high7.5

CVE-2008-3439

SpeedBit Video Acceleration before 2.2.1.8 does not properly verify the authenticity of updates, which allows man-in-the-middle attackers to execute arbitrary …

Impact

SpeedBit Video Acceleration before 2.2.1.8 does not properly verify the authenticity of updates, which allows man-in-the-middle attackers to execute arbitrary code via a Trojan horse update, as demonstrated by evilgrade and DNS cache poisoning.

Affected products

VendorProductAffected versions
SpeedbitSpeedbit Video Accelerator
through 2.2.0.7

Weakness classification

CWE-94

References