{"uuid": "19c7cb36-2cc0-447f-ac58-0fde91965746", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2008-4388", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/browser/symantec_appstream_unsafe.rb", "content": "{\"aliases\": [], \"arch\": \"\", \"author\": [\"MC \"], \"autofilter_ports\": [], \"autofilter_services\": [], \"check\": false, \"default_credential\": false, \"description\": \"This module exploits a vulnerability in Symantec AppStream Client 5.x. The vulnerability\\n          is in the LaunchObj ActiveX control (launcher.dll 5.1.0.82) containing the \\\"installAppMgr()\\\"\\n          method. The insecure method can be exploited to download and execute arbitrary files in the\\n          context of the currently logged-on user.\", \"disclosure_date\": \"2009-01-15\", \"fullname\": \"exploit/windows/browser/symantec_appstream_unsafe\", \"is_install_path\": true, \"mod_time\": \"2026-03-11 21:31:08 +0000\", \"name\": \"Symantec AppStream LaunchObj ActiveX Control Arbitrary File Download and Execute\", \"needs_cleanup\": null, \"notes\": {\"Reliability\": [\"unknown-reliability\"], \"SideEffects\": [\"unknown-side-effects\"], \"Stability\": [\"unknown-stability\"]}, \"path\": \"/modules/exploits/windows/browser/symantec_appstream_unsafe.rb\", \"platform\": \"Windows\", \"post_auth\": false, \"rank\": 600, \"ref_name\": \"windows/browser/symantec_appstream_unsafe\", \"references\": [\"CVE-2008-4388\", \"OSVDB-51410\"], \"rport\": null, \"session_types\": false, \"targets\": [\"Automatic\"], \"type\": \"exploit\"}", "creation_timestamp": "2026-09-08T06:51:14.939321Z"}