CVE-2008-3324

HIGH 8.1CVE-2008-3324 · Published 18/08/2008 · updated 16/06/2026

In short

CVE-2008-3324 is a HIGH (CVSS 8.1) vulnerability affecting party poker client (party gaming).
Chance of exploitation in the next 30 days (EPSS): 1.4%, higher than 71.9% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
party poker client party_gaming	`= 121-120`	No fix yet

Description

The PartyGaming PartyPoker client program 121/120 does not properly verify the authenticity of updates, which allows remote man-in-the-middle attackers to execute arbitrary code via a Trojan horse update.

References

seclists.org/fulldisclosure/2008/Aug/0302.html · Mailing List
securityfocus.com/archive/1/495724/100/0/threaded · Broken Link
securityfocus.com/bid/30693 · Broken Link
exchange.xforce.ibmcloud.com/vulnerabilities/44477 · Third Party Advisory

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free