Lucene search

PRIOn knowledge basePRION:CVE-2008-0309

HistoryFeb 28, 2008 - 8:44 p.m.

Stack overflow

2008-02-2820:44:00

PRIOn knowledge base

www.prio-n.com

8.8 High

AI Score

Confidence

High

6.8 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

0.024 Low

EPSS

Percentile

89.6%

JSON

Stack-based buffer overflow in Symantec Decomposer, as used in certain Symantec antivirus products including Symantec Scan Engine 5.1.2 and other versions before 5.1.6.31, allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a malformed RAR file to the Internet Content Adaptation Protocol (ICAP) port (1344/tcp).

CPENameOperatorVersion
scan_enginele5.1.4.24
symantec_antivirus_filtering_domino_mpele3.0.12
symantec_antivirus_filtering_domino_mpele3.0.12
symantec_antivirus_filtering_domino_mpele3.0.12
symantec_antivirus_network_attached_storagele4.3.16.39
symantec_antivirus_scan_enginele4.3.16.39
symantec_antivirus_scan_engine_cachingle4.3.16.39
symantec_antivirus_scan_engine_clearswiftle4.3.16.39
symantec_antivirus_scan_engine_for_microsoft_sharepointle4.3.16.39
symantec_antivirus_scan_engine_for_ms_isale4.3.16.39

Name	Operator	Version
scan_engine	le	5.1.4.24
symantec_antivirus_filtering_domino_mpe	le	3.0.12
symantec_antivirus_filtering_domino_mpe	le	3.0.12
symantec_antivirus_filtering_domino_mpe	le	3.0.12
symantec_antivirus_network_attached_storage	le	4.3.16.39
symantec_antivirus_scan_engine	le	4.3.16.39
symantec_antivirus_scan_engine_caching	le	4.3.16.39
symantec_antivirus_scan_engine_clearswift	le	4.3.16.39
symantec_antivirus_scan_engine_for_microsoft_sharepoint	le	4.3.16.39
symantec_antivirus_scan_engine_for_ms_isa	le	4.3.16.39

Rows per page:

1-10 of 131

References

labs.idefense.com/intelligence/vulnerabilities/display.php?id=667

secunia.com/advisories/29140

www.securityfocus.com/bid/27913

www.securitytracker.com/id?1019503

www.symantec.com/avcenter/security/Content/2008.02.27.html

www.vupen.com/english/advisories/2008/0680

8.8 High

AI Score

Confidence

High

6.8 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

0.024 Low

EPSS

Percentile

89.6%

JSON

Related for PRION:CVE-2008-0309