CVE-2008-3436

N/A

Published: August 1, 2008 at 02:00 PM UTC

Updated: June 16, 2026 at 10:55 PM UTC

1 product affected across 1 vendorNotepad++

Using N/A by N/A?

Get instant alerts when new vulnerabilities affect N/A - before attackers find them.

Real-time alertsTrack your software stackFree plan available

Start Free Sign In

Severity

N/A

Exploit prediction

EPSS 2%

Description

The GUP generic update process in Notepad++ before 4.8.1 does not properly verify the authenticity of updates, which allows man-in-the-middle attackers to execute arbitrary code via a Trojan horse update, as demonstrated by evilgrade and DNS cache poisoning.

Affected

Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.

Notepad++· Notepad

95%

v ≤ 1.0v ≤ 1.1v ≤ 1.2v ≤ 1.3v ≤ 1.4v ≤ 1.5v ≤ 1.6v ≤ 1.7v ≤ 1.8v ≤ 1.9v ≤ 2.1v ≤ 2.2v ≤ 2.3v ≤ 2.4v ≤ 2.5v ≤ 2.6v ≤ 2.8v ≤ 2.9v ≤ 3.0v ≤ 3.1v ≤ 3.2v ≤ 3.3v ≤ 3.4v ≤ 3.5v ≤ 3.6v ≤ 3.7v ≤ 3.8v ≤ 3.9v ≤ 4.0v ≤ 4.0.2v ≤ 4.1v ≤ 4.1.1v ≤ 4.1.2v ≤ 4.2.1v ≤ 4.2.2v ≤ 4.3v ≤ 4.4v ≤ 4.5v ≤ 4.6v ≤ 4.7v ≤ 4.7.2