CVE-2008-3436

Published: Aug 1, 2008Modified: Apr 23, 2026

7.5

Vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Exploitability: 10.0 / Impact: 6.4

Source: NVD

Description

The GUP generic update process in Notepad++ before 4.8.1 does not properly verify the authenticity of updates, which allows man-in-the-middle attackers to execute arbitrary code via a Trojan horse update, as demonstrated by evilgrade and DNS cache poisoning.

Affected (41)

Products: Notepad++: Notepad++

Notepad++

1 product

Notepad++

Configuration A

41 vulnerable

Vulnerable Software	Affected Versions
Notepad++ Notepad++	version ≤ 1.0
Notepad++ Notepad++	version ≤ 1.1
Notepad++ Notepad++	version ≤ 1.2
Notepad++ Notepad++	version ≤ 1.3
Notepad++ Notepad++	version ≤ 1.4
Notepad++ Notepad++	version ≤ 1.5
Notepad++ Notepad++	version ≤ 1.6
Notepad++ Notepad++	version ≤ 1.7
Notepad++ Notepad++	version ≤ 1.8
Notepad++ Notepad++	version ≤ 1.9
Notepad++ Notepad++	version ≤ 2.1
Notepad++ Notepad++	version ≤ 2.2
Notepad++ Notepad++	version ≤ 2.3
Notepad++ Notepad++	version ≤ 2.4
Notepad++ Notepad++	version ≤ 2.5
Notepad++ Notepad++	version ≤ 2.6
Notepad++ Notepad++	version ≤ 2.8
Notepad++ Notepad++	version ≤ 2.9
Notepad++ Notepad++	version ≤ 3.0
Notepad++ Notepad++	version ≤ 3.1
Notepad++ Notepad++	version ≤ 3.2
Notepad++ Notepad++	version ≤ 3.3
Notepad++ Notepad++	version ≤ 3.4
Notepad++ Notepad++	version ≤ 3.5
Notepad++ Notepad++	version ≤ 3.6
Notepad++ Notepad++	version ≤ 3.7
Notepad++ Notepad++	version ≤ 3.8
Notepad++ Notepad++	version ≤ 3.9
Notepad++ Notepad++	version ≤ 4.0
Notepad++ Notepad++	version ≤ 4.0.2
Notepad++ Notepad++	version ≤ 4.1
Notepad++ Notepad++	version ≤ 4.1.1
Notepad++ Notepad++	version ≤ 4.1.2
Notepad++ Notepad++	version ≤ 4.2.1
Notepad++ Notepad++	version ≤ 4.2.2
Notepad++ Notepad++	version ≤ 4.3
Notepad++ Notepad++	version ≤ 4.4
Notepad++ Notepad++	version ≤ 4.5
Notepad++ Notepad++	version ≤ 4.6
Notepad++ Notepad++	version ≤ 4.7
Notepad++ Notepad++	version ≤ 4.7.2