7.1

CVE-2008-0308

Symantec Decomposer, as used in certain Symantec antivirus products including Symantec Scan Engine 5.1.2 and other versions before 5.1.6.31, allows remote attackers to cause a denial of service (memory consumption) via a malformed RAR file to the Internet Content Adaptation Protocol (ICAP) port (1344/tcp).
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Symantec ≫ Scan Engine Version <= 5.1.4.24
Symantec ≫ Symantec Antivirus Clearswift Version <= 4.3.16.39
Symantec ≫ Symantec Antivirus Filtering Domino Mpe Editionaix Version <= 3.0.12
Symantec ≫ Symantec Antivirus Filtering Domino Mpe Editionlinux Version <= 3.0.12
Symantec ≫ Symantec Antivirus Filtering Domino Mpe Editionsolaris Version <= 3.0.12
Symantec ≫ Symantec Antivirus Messaging Version <= 4.3.16.39
Symantec ≫ Symantec Antivirus Ms Isa Version <= 4.3.16.39
Symantec ≫ Symantec Antivirus Scan Engine Version <= 4.3.16.39
Symantec ≫ Symantec Mail Security Exchange Version <= 4.6.5.12
Symantec ≫ Symantec Mail Security Exchange Version <= 5.0.4.363
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 2.55% 0.83
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
nvd@nist.gov 7.1 8.6 6.9
AV:N/AC:M/Au:N/C:N/I:N/A:C
Es wurden noch keine Informationen zu CWE veröffentlicht.
http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=666
http://secunia.com/advisories/29140
Vendor Advisory
http://www.securityfocus.com/bid/27911
http://www.securitytracker.com/id?1019503
http://www.symantec.com/avcenter/security/Content/2008.02.27.html
http://www.vupen.com/english/advisories/2008/0680