CVE-2008-3436

The GUP generic update process in Notepad++ before 4.8.1 does not properly verify the authenticity of updates, which allows man-in-the-middle attackers to execute arbitrary code via a Trojan horse update, as demonstrated by evilgrade and DNS cache poisoning.

• notepad\+\+ notepad\+\+ (<= 1.0) • notepad\+\+ notepad\+\+ (<= 1.1) • notepad\+\+ notepad\+\+ (<= 1.2) • notepad\+\+ notepad\+\+ (<= 1.3) • notepad\+\+ notepad\+\+ (<= 1.4) • notepad\+\+ notepad\+\+ (<= 1.5) • notepad\+\+ notepad\+\+ (<= 1.6) • notepad\+\+ notepad\+\+ (<= 1.7) • notepad\+\+ notepad\+\+ (<= 1.8) • notepad\+\+ notepad\+\+ (<= 1.9) • notepad\+\+ notepad\+\+ (<= 2.1) • notepad\+\+ notepad\+\+ (<= 2.2) • notepad\+\+ notepad\+\+ (<= 2.3) • notepad\+\+ notepad\+\+ (<= 2.4) • notepad\+\+ notepad\+\+ (<= 2.5) • notepad\+\+ notepad\+\+ (<= 2.6) • notepad\+\+ notepad\+\+ (<= 2.8) • notepad\+\+ notepad\+\+ (<= 2.9) • notepad\+\+ notepad\+\+ (<= 3.0) • notepad\+\+ notepad\+\+ (<= 3.1) • notepad\+\+ notepad\+\+ (<= 3.2) • notepad\+\+ notepad\+\+ (<= 3.3) • notepad\+\+ notepad\+\+ (<= 3.4) • notepad\+\+ notepad\+\+ (<= 3.5) • notepad\+\+ notepad\+\+ (<= 3.6) • notepad\+\+ notepad\+\+ (<= 3.7) • notepad\+\+ notepad\+\+ (<= 3.8) • notepad\+\+ notepad\+\+ (<= 3.9) • notepad\+\+ notepad\+\+ (<= 4.0) • notepad\+\+ notepad\+\+ (<= 4.0.2) • notepad\+\+ notepad\+\+ (<= 4.1) • notepad\+\+ notepad\+\+ (<= 4.1.1) • notepad\+\+ notepad\+\+ (<= 4.1.2) • notepad\+\+ notepad\+\+ (<= 4.2.1) • notepad\+\+ notepad\+\+ (<= 4.2.2) • notepad\+\+ notepad\+\+ (<= 4.3) • notepad\+\+ notepad\+\+ (<= 4.4) • notepad\+\+ notepad\+\+ (<= 4.5) • notepad\+\+ notepad\+\+ (<= 4.6) • notepad\+\+ notepad\+\+ (<= 4.7) • notepad\+\+ notepad\+\+ (<= 4.7.2)