Buffer overflow in Symantec Scan Engine
CVE-2008-0309
Stack-based buffer overflow in Symantec Decomposer, as used in certain Symantec antivirus products including Symantec Scan Engine 5.1.2 and other versions before 5.1.6.31, allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a malformed RAR file to the Internet Content Adaptation Protocol (ICAP) port (1344/tcp).
Vulnerability class: Buffer Overflow
Published · last modified .
CVSS v2 metric
CVSS v2 base score 6.8 (Medium). Vector: AV:N/AC:M/Au:N/C:P/I:P/A:P. This CVE predates CVSS v3 and has no v3 score from NVD.
EPSS exploit prediction
EPSS: 0.037 (89.2th percentile), scored .
Low probability of exploitation in the next 30 days, but still tracked. 89th percentile — 89.2% of CVEs in the catalogue have a lower EPSS than this one. How to read EPSS.
EPSS over last 30 days · oldest: 0.037 · newest: 0.037 · change: 0.000
Affected products
- Symantec Scan Engine
- Symantec Antivirus Filtering Domino Mpe
- Symantec Antivirus Network Attached Storage
- Symantec Antivirus Scan Engine
- Symantec Antivirus Scan Engine Caching
- Symantec Antivirus Scan Engine Clearswift
- Symantec Antivirus Scan Engine For Microsoft Sharepoint
- Symantec Antivirus Scan Engine For Ms Isa
- Symantec Antivirus Scan Engine Messaging
- Symantec Mail Security For Microsoft Exchange
Weakness classification (CWE)
References
- www.symantec.com/avcenter/security/Content/2008.02.27.html
- www.vupen.com/english/advisories/2008/0680 (vdb-entry)
- www.securityfocus.com/bid/27913 (vdb-entry)
- secunia.com/advisories/29140 (Vendor Advisory, third-party-advisory)
- labs.idefense.com/intelligence/vulnerabilities/display.php (third-party-advisory)
- www.securitytracker.com/id (vdb-entry)