HIGH🇵🇱 Wersja polska

CVE-2008-3435

CVSS 7.5v2.0pub. 2008-08-01upd. 2026-04-23

LinkedIn Browser Toolbar 3.0.3.1100 and earlier does not properly verify the authenticity of updates, which allows man-in-the-middle attackers to execute arbitrary code via a Trojan horse update, as demonstrated by evilgrade and DNS cache poisoning.

CVSS Vector
AV:N/AC:L/Au:N/C:P/I:P/A:P

  • Linkedin Browser Toolbar

    APP
    Linkedin
    ≤ 3.0.3.1100
🔵
CHECK WITH VENDOR
No clear patch data available. Check vendor references.
Tags
RCE
CWE
References

Related vulnerabilities

CVE-2024-28425HIGH7.5ten sam vendor

greykite v1.0.0 was discovered to contain an arbitrary file upload vulnerability in the load_obj function at /...

CVE-2025-56139MEDIUM5.3ten sam vendor

LinkedIn Mobile Application for Android version 4.1.1087.2 fails to update link preview metadata (image, title...

CVE-2021-4264MEDIUM6.3ten sam vendor

A vulnerability was found in LinkedIn dustjs up to 2.x and classified as problematic. Affected by this issue i...

CVE-2021-26722MEDIUM6.1ten sam vendor

LinkedIn Oncall through 1.4.0 allows reflected XSS via /query because of mishandling of the "No results found ...

CVE-2007-3955MEDIUM6.8ten sam vendor

Buffer overflow in the IEToolbar.IEContextMenu.1 ActiveX control in LinkedInIEToolbar.dll in the LinkedIn Tool...