Lucene search

[email protected]NVD:CVE-2008-0309

HistoryFeb 28, 2008 - 8:44 p.m.

CVE-2008-0309

2008-02-2820:44:00

CWE-119

[email protected]

web.nvd.nist.gov

6.8 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

8.2 High

AI Score

Confidence

High

0.024 Low

EPSS

Percentile

89.9%

JSON

Stack-based buffer overflow in Symantec Decomposer, as used in certain Symantec antivirus products including Symantec Scan Engine 5.1.2 and other versions before 5.1.6.31, allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a malformed RAR file to the Internet Content Adaptation Protocol (ICAP) port (1344/tcp).

Affected configurations

NVD

Node

symantecscan_engineRange≤5.1.4.24

symantecsymantec_antivirus_filtering_domino_mpeRange≤3.0.12aix

symantecsymantec_antivirus_filtering_domino_mpeRange≤3.0.12linux

symantecsymantec_antivirus_filtering_domino_mpeRange≤3.0.12solaris

symantecsymantec_antivirus_network_attached_storageRange≤4.3.16.39

symantecsymantec_antivirus_scan_engineRange≤4.3.16.39

symantecsymantec_antivirus_scan_engine_cachingRange≤4.3.16.39

symantecsymantec_antivirus_scan_engine_clearswiftRange≤4.3.16.39

symantecsymantec_antivirus_scan_engine_for_microsoft_sharepointRange≤4.3.16.39

symantecsymantec_antivirus_scan_engine_for_ms_isaRange≤4.3.16.39

symantecsymantec_antivirus_scan_engine_messagingRange≤4.3.16.39

symantecsymantec_mail_security_for_microsoft_exchangeRange≤4.6.5.12

symantecsymantec_mail_security_for_microsoft_exchangeRange≤5.0.4.363

References

labs.idefense.com/intelligence/vulnerabilities/display.php?id=667

secunia.com/advisories/29140

www.securityfocus.com/bid/27913

www.securitytracker.com/id?1019503

www.symantec.com/avcenter/security/Content/2008.02.27.html

www.vupen.com/english/advisories/2008/0680

6.8 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

8.2 High

AI Score

Confidence

High

0.024 Low

EPSS

Percentile

89.9%

JSON

Related for NVD:CVE-2008-0309

cve1 cvelist1 prion1 seebug1 securityvulns1 nessus1