Lucene search

[email protected]CVE-2008-3373

HistoryJul 30, 2008 - 5:41 p.m.

CVE-2008-3373

2008-07-3017:41:00

NVD-CWE-noinfo

CWE-189

[email protected]

web.nvd.nist.gov

grisoft

avg

anti-virus

cve-2008-3373

denial of service

upx

remote attackers

6.7 Medium

AI Score

Confidence

High

5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

0.042 Low

EPSS

Percentile

92.2%

JSON

The files parsing engine in Grisoft AVG Anti-Virus before 8.0.156 allows remote attackers to cause a denial of service (engine crash) via a crafted UPX compressed file, which triggers a divide-by-zero error.

CPENameOperatorVersion
grisoft:avg_antivirusgrisoft avg antiviruseq7.1
grisoft:avg_antivirusgrisoft avg antiviruseq7.5
grisoft:avg_antivirusgrisoft avg antiviruseq8.0

CPE	Name	Operator	Version
grisoft:avg_antivirus	grisoft avg antivirus	eq	7.1
grisoft:avg_antivirus	grisoft avg antivirus	eq	7.5
grisoft:avg_antivirus	grisoft avg antivirus	eq	8.0

References

secunia.com/advisories/31290

www.grisoft.com/ww.94247

www.nruns.com/advisories/%5Bn.runs-SA-2008%20004%5D%20-%20AVG%20Antivirus%20UPX%20parsing%20Divide%20by%20Zero%20Advisory.txt

www.securityfocus.com/archive/1/494867/100/0/threaded

www.securityfocus.com/bid/30417

www.securitytracker.com/id?1020570

www.vupen.com/english/advisories/2008/2225/references

exchange.xforce.ibmcloud.com/vulnerabilities/44057

6.7 Medium

AI Score

Confidence

High

5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

0.042 Low

EPSS

Percentile

92.2%

JSON

Related for CVE-2008-3373

prion1 openvas2 nessus1 cvelist1