Buffer overflow in Symantec Scan_engine
CVE-2008-0309
Stack-based buffer overflow in Symantec Decomposer, as used in certain Symantec antivirus products including Symantec Scan Engine 5.1.2 and other versions before 5.1.6.31, allows remote attackers to execute arbitrary code or cause a denial…
Vulnerability class: Buffer Overflow
EPSS: 0.037 (88.4th percentile) — read the EPSS interpretation.
Affected products
- Symantec Scan_engine
- Symantec Symantec_antivirus_filtering_domino_mpe
- Symantec Symantec_antivirus_network_attached_storage
- Symantec Symantec_antivirus_scan_engine
- Symantec Symantec_antivirus_scan_engine_caching
- Symantec Symantec_antivirus_scan_engine_clearswift
- Symantec Symantec_antivirus_scan_engine_for_microsoft_sharepoint
- Symantec Symantec_antivirus_scan_engine_for_ms_isa
- Symantec Symantec_antivirus_scan_engine_messaging
- Symantec Symantec_mail_security_for_microsoft_exchange
Weakness classification (CWE)
References
- cve@mitre.org (x_refsource_CONFIRM)
- cve@mitre.org (vdb-entry, x_refsource_VUPEN)
- cve@mitre.org (vdb-entry, x_refsource_BID)
- cve@mitre.org (x_refsource_SECUNIA, Vendor Advisory, third-party-advisory)
- cve@mitre.org (x_refsource_IDEFENSE, third-party-advisory)
- cve@mitre.org (vdb-entry, x_refsource_SECTRACK)