CVE-2008-3324

HIGH8.1

The PartyGaming PartyPoker client program 121/120 does not properly verify the authenticity of updates, which allows remote man-in-the-middle attackers to execute arbitrary code via a Trojan horse update

Published Aug 18, 2008

Modified 1 years ago

No fix available

Details

The PartyGaming PartyPoker client program 121/120 does not properly verify the authenticity of updates, which allows remote man-in-the-middle attackers to execute arbitrary code via a Trojan horse update.

References

WEBhttp://seclists.org/fulldisclosure/2008/Aug/0302.html WEBhttp://www.securityfocus.com/archive/1/495724/100/0/threaded WEBhttp://www.securityfocus.com/bid/30693 WEBhttps://exchange.xforce.ibmcloud.com/vulnerabilities/44477 ADVISORYhttps://www.cve.org/CVERecord?id=CVE-2008-3324

CVSS Analysis

CVSS v3.1

8.1

Exploitability

Attack Vector

NetworkAV:N

Attack Complexity

HighAC:H

Privileges Required

NonePR:N

User Interaction

NoneUI:N

Scope

UnchangedS:U

Impact

Confidentiality

HighC:H

Integrity

HighI:H

Availability

HighA:H

8.1/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

Ecosystems

Timeline

PublishedAug 18, 2008

ModifiedAug 7, 2024