Symantec Decomposer Multiple Vulnerabilities (SYM08-006)

The remote Symantec product is affected by multiple issues. By sending a specially crafted RAR file to TCP port 1344, an unauthenticated attacker may be able to cause a denial of service condition or execute arbitrary code, subject to privileges of the user running the application. C Tenable...

CVE-2008-0308

CVE-2008-0308 affects Symantec Decomposer used in Symantec Scan Engine 5.1.2 and earlier versions up to 5.1.6.31. A specially crafted RAR file sent to ICAP port 1344 can cause memory exhaustion leading to DoS; some sources also mention possible arbitrary code execution under user privileges. Reme...