CVE-2008-0308

Symantec Decomposer, as used in certain Symantec antivirus products including Symantec Scan Engine 5.1.2 and other versions before 5.1.6.31, allows remote attackers to cause a denial of service memory consumption via a malformed RAR file to the Internet Content Adaptation Protocol ICAP port...

CVE-2008-0309

Stack-based buffer overflow in Symantec Decomposer, as used in certain Symantec antivirus products including Symantec Scan Engine 5.1.2 and other versions before 5.1.6.31, allows remote attackers to execute arbitrary code or cause a denial of service application crash via a malformed RAR file to...

Code injection

Symantec Decomposer, as used in certain Symantec antivirus products including Symantec Scan Engine 5.1.2 and other versions before 5.1.6.31, allows remote attackers to cause a denial of service memory consumption via a malformed RAR file to the Internet Content Adaptation Protocol ICAP port...

CVE-2008-0309

CVE-2008-0309 describes a stack-based buffer overflow in Symantec Decomposer used by Symantec Scan Engine and related products. When processing a malformed RAR file sent to ICAP port 1344/tcp, unauthenticated remote attackers could trigger arbitrary code execution or cause a denial of service. Af...

CVE-2008-0309

Stack-based buffer overflow in Symantec Decomposer, as used in certain Symantec antivirus products including Symantec Scan Engine 5.1.2 and other versions before 5.1.6.31, allows remote attackers to execute arbitrary code or cause a denial of service application crash via a malformed RAR file to...

CVE-2008-0308

Symantec Decomposer, as used in certain Symantec antivirus products including Symantec Scan Engine 5.1.2 and other versions before 5.1.6.31, allows remote attackers to cause a denial of service memory consumption via a malformed RAR file to the Internet Content Adaptation Protocol ICAP port...

Symantec Decomposer引擎RAR文件解析栈溢出漏洞

BUGTRAQ ID: 27913 CVECAN ID: CVE-2008-0309 Symantec的Decomposer引擎用于在扫描恶意内容时解析一些类型的文档内容。 Decomposer引擎处理畸形格式的RAR文档时存在漏洞，如果Decomposer引擎引擎扫描到了畸形的RAR文件的话，就可能触发栈溢出，导致拒绝服务或执行任意指令。 Symantec AntiVirus = 4.3.16.39 Symantec Scan Engine = 5.1.4.24 Symantec Mail Security for Microsoft Exchange = 5.0.4.363...

CVE-2008-0309: Improper Restriction of Operations within the Bounds of a Memory Buffer

Stack-based buffer overflow in Symantec Decomposer, as used in certain Symantec antivirus products including Symantec Scan Engine 5.1.2 and other versions before 5.1.6.31, allows remote attackers to execute arbitrary code or cause a denial of service application crash via a malformed RAR file to...

CVE-2008-0308: Undefined Security Weakness

Symantec Decomposer, as used in certain Symantec antivirus products including Symantec Scan Engine 5.1.2 and other versions before 5.1.6.31, allows remote attackers to cause a denial of service memory consumption via a malformed RAR file to the Internet Content Adaptation Protocol ICAP port...

Symantec Decomposer引擎资源耗尽拒绝服务漏洞

BUGTRAQ ID: 27911 CVECAN ID: CVE-2008-0308 Symantec的Decomposer引擎用于在扫描恶意内容时解析一些类型的文档内容。 Decomposer引擎处理畸形格式的RAR文档时存在漏洞，如果Decomposer引擎引擎扫描到了畸形的RAR文件的话，就可能耗尽大量内存，导致整个系统拒绝服务。 Symantec AntiVirus = 4.3.16.39 Symantec Scan Engine = 5.1.4.24 Symantec Mail Security for Microsoft Exchange = 5.0.4.363 Symant...

Design/Logic Flaw

The Decomposer component in multiple Symantec products allows remote attackers to cause a denial of service infinite loop via a certain value in the PACKSIZE field of a RAR archive file header...

Heap overflow

Heap-based buffer overflow in the Decomposer component in multiple Symantec products allows remote attackers to execute arbitrary code via multiple crafted CAB archives...

CVE-2007-3699

The Decomposer component in multiple Symantec products allows remote attackers to cause a denial of service infinite loop via a certain value in the PACKSIZE field of a RAR archive file header...

CVE-2007-0447

The CVE-2007-0447 entry corresponds to a heap-based buffer overflow in the Decomposer used by Symantec products (notably Symantec Antivirus Scan Engine / Mail Security for Exchange/Domino) when processing crafted CAB archives, enabling remote code execution. Connected details corroborate: a heap ...

CVE-2007-3699

CVE-2007-3699 affects the Decomposer component in multiple Symantec products, enabling remote attackers to trigger a denial of service (infinite loop) by crafting the PACK_SIZE field in a RAR header. Connected Nessus entries reiterate this as part of “Symantec Mail Security Engine/Scanner” vulner...

CVE-2007-3699: Undefined Security Weakness

The Decomposer component in multiple Symantec products allows remote attackers to cause a denial of service infinite loop via a certain value in the PACKSIZE field of a RAR archive file header...

CVE-2007-0447: Improper Restriction of Operations within the Bounds of a Memory Buffer

Heap-based buffer overflow in the Decomposer component in multiple Symantec products allows remote attackers to execute arbitrary code via multiple crafted CAB archives...