GCVE-110-CERTCC-2008-194505

Advisory PublishedCVSS 0.0/10

Vulnetix · Advisory published January 15, 2009

The Symantec AppStream LaunchObj ActiveX control contains methods that can be used to download and execute arbitrary code.

Download JSON Open in Console

Risk Scores

CVSS 2.0

0.0/10

None · AV:--/AC:--/Au:--/C:--/I:--/A:--

certcc-cam

impact15population6exploitation0widely_known1score_current5.680125ease_of_exploitation17

certcc-vrda

d1_impact4d1_population2d1_direct_report1

certcc-cvss-temporal-env

temporal_score0remediation_levelNot Defined (ND)report_confidenceNot Defined (ND)environmental_score0target_distributionNot Defined (ND)environmental_vectorCDP:Not Defined (ND)/TD:Not Defined (ND)/CR:Not Defined (ND)/IR:Not Defined (ND)/AR:Not Defined (ND)

Aliases

CVE-2008-4388

References

Symantec AppStream LaunchObj ActiveX control vulnerable to arbitrary code download and execution

advisory

Symantec AppStream LaunchObj ActiveX control vulnerable to arbitrary code download and execution

url

Symantec AppStream LaunchObj ActiveX control vulnerable to arbitrary code download and execution

advisory

Browse GCVE Records

74,108 records in the GCVE database · Updated July 20, 2026

No matching records found.

Explore Further

Investigate this vulnerability in the interactive console or download the raw GCVE record.

Open in Console Download JSON