CVE-2008-0308
Severity Score
7.1
*CVSS v2
Exploit Likelihood
*EPSS
Affected Versions
*CPE
Public Exploits
0
*Multiple Sources
Exploited in Wild
-
*KEV
Decision
-
*SSVC
Descriptions
Symantec Decomposer, as used in certain Symantec antivirus products including Symantec Scan Engine 5.1.2 and other versions before 5.1.6.31, allows remote attackers to cause a denial of service (memory consumption) via a malformed RAR file to the Internet Content Adaptation Protocol (ICAP) port (1344/tcp).
Symantec Decomposer, como se usa en ciertos productos antivirus Symantec incluyendo Symantec Scan Engine 5.1.2 y otras versiones antes de 5.1.6.31, permite a atacantes remotos provocar una denegación de servicio (agotamiento de memoria) a través de un archivo RAR mal formado al puerto (1344/tcp) del Internet Content Adaptation Protocol (ICAP) (Protocolo de Adaptación de Contenido de Internet).
*Credits:
N/A
CVSS Scores
Attack Vector
Attack Complexity
Authentication
Confidentiality
Integrity
Availability
* Common Vulnerability Scoring System
SSVC
- Decision:-
Exploitation
Automatable
Tech. Impact
* Organization's Worst-case Scenario
Timeline
- 2008-01-16 CVE Reserved
- 2008-02-27 CVE Published
- 2024-08-07 CVE Updated
- 2024-10-17 EPSS Updated
- ---------- Exploited in Wild
- ---------- KEV Due Date
- ---------- First Exploit
CWE
- CWE-399: Resource Management Errors
CAPEC
References (6)
| URL | Tag | Source |
|---|---|---|
| http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=666 | Third Party Advisory | |
| http://www.securityfocus.com/bid/27911 | Vdb Entry | |
| http://www.securitytracker.com/id?1019503 | Vdb Entry | |
| http://www.symantec.com/avcenter/security/Content/2008.02.27.html | X_refsource_confirm | |
| http://www.vupen.com/english/advisories/2008/0680 | Vdb Entry |
| URL | Date | SRC |
|---|
| URL | Date | SRC |
|---|
| URL | Date | SRC |
|---|---|---|
| http://secunia.com/advisories/29140 | 2011-03-08 |
Affected Vendors, Products, and Versions
| Vendor | Product | Version | Other | Status | ||||||
|---|---|---|---|---|---|---|---|---|---|---|
| Vendor | Product | Version | Other | Status | <-- --> | Vendor | Product | Version | Other | Status |
| Symantec Search vendor "Symantec" | Scan Engine Search vendor "Symantec" for product "Scan Engine" | <= 5.1.4.24 Search vendor "Symantec" for product "Scan Engine" and version " <= 5.1.4.24" | - |
Affected
| ||||||
| Symantec Search vendor "Symantec" | Symantec Antivirus Clearswift Search vendor "Symantec" for product "Symantec Antivirus Clearswift" | <= 4.3.16.39 Search vendor "Symantec" for product "Symantec Antivirus Clearswift" and version " <= 4.3.16.39" | - |
Affected
| ||||||
| Symantec Search vendor "Symantec" | Symantec Antivirus Filtering Domino Mpe Search vendor "Symantec" for product "Symantec Antivirus Filtering Domino Mpe" | <= 3.0.12 Search vendor "Symantec" for product "Symantec Antivirus Filtering Domino Mpe" and version " <= 3.0.12" | aix |
Affected
| ||||||
| Symantec Search vendor "Symantec" | Symantec Antivirus Filtering Domino Mpe Search vendor "Symantec" for product "Symantec Antivirus Filtering Domino Mpe" | <= 3.0.12 Search vendor "Symantec" for product "Symantec Antivirus Filtering Domino Mpe" and version " <= 3.0.12" | linux |
Affected
| ||||||
| Symantec Search vendor "Symantec" | Symantec Antivirus Filtering Domino Mpe Search vendor "Symantec" for product "Symantec Antivirus Filtering Domino Mpe" | <= 3.0.12 Search vendor "Symantec" for product "Symantec Antivirus Filtering Domino Mpe" and version " <= 3.0.12" | solaris |
Affected
| ||||||
| Symantec Search vendor "Symantec" | Symantec Antivirus Messaging Search vendor "Symantec" for product "Symantec Antivirus Messaging" | <= 4.3.16.39 Search vendor "Symantec" for product "Symantec Antivirus Messaging" and version " <= 4.3.16.39" | - |
Affected
| ||||||
| Symantec Search vendor "Symantec" | Symantec Antivirus Microsoft Sharepoint Search vendor "Symantec" for product "Symantec Antivirus Microsoft Sharepoint" | <= 4.3.16.39 Search vendor "Symantec" for product "Symantec Antivirus Microsoft Sharepoint" and version " <= 4.3.16.39" | - |
Affected
| ||||||
| Symantec Search vendor "Symantec" | Symantec Antivirus Ms Isa Search vendor "Symantec" for product "Symantec Antivirus Ms Isa" | <= 4.3.16.39 Search vendor "Symantec" for product "Symantec Antivirus Ms Isa" and version " <= 4.3.16.39" | - |
Affected
| ||||||
| Symantec Search vendor "Symantec" | Symantec Antivirus Network Attached Storage Search vendor "Symantec" for product "Symantec Antivirus Network Attached Storage" | <= 4.3.16.39 Search vendor "Symantec" for product "Symantec Antivirus Network Attached Storage" and version " <= 4.3.16.39" | - |
Affected
| ||||||
| Symantec Search vendor "Symantec" | Symantec Antivirus Scan Engine Search vendor "Symantec" for product "Symantec Antivirus Scan Engine" | <= 4.3.16.39 Search vendor "Symantec" for product "Symantec Antivirus Scan Engine" and version " <= 4.3.16.39" | - |
Affected
| ||||||
| Symantec Search vendor "Symantec" | Symantec Antivirus Scan Engine Caching Search vendor "Symantec" for product "Symantec Antivirus Scan Engine Caching" | <= 4.3.16.39 Search vendor "Symantec" for product "Symantec Antivirus Scan Engine Caching" and version " <= 4.3.16.39" | - |
Affected
| ||||||
| Symantec Search vendor "Symantec" | Symantec Mail Security Exchange Search vendor "Symantec" for product "Symantec Mail Security Exchange" | <= 4.6.5.12 Search vendor "Symantec" for product "Symantec Mail Security Exchange" and version " <= 4.6.5.12" | - |
Affected
| ||||||
| Symantec Search vendor "Symantec" | Symantec Mail Security Exchange Search vendor "Symantec" for product "Symantec Mail Security Exchange" | <= 5.0.4.363 Search vendor "Symantec" for product "Symantec Mail Security Exchange" and version " <= 5.0.4.363" | - |
Affected
| ||||||