Vulnerability in Microsoft Antigen For Exchange
CVE-2008-1438
Unspecified vulnerability in Microsoft Malware Protection Engine (mpengine.dll) 1.1.3520.0 and 0.1.13.192, as used in multiple Microsoft products, allows context-dependent attackers to cause a denial of service (disk space exhaustion) via a file with "crafted data structures" that trigger the creation of large temporary files, a different vulnerability than CVE-2008-1437.
EPSS: 0.129 (96.0th percentile) — read the EPSS interpretation.
Affected products
- Microsoft Antigen_for_exchange
- Microsoft Antigen_for_smtp_gateway
- Microsoft Diagnostics_and_recovery_toolkit — versions 6.0
- Microsoft Forefront_client_security
- Microsoft Forefront_security_for_exchange_server
- Microsoft Forefront_security_for_sharepoint
- Microsoft Malware_protection_engine — versions 0.1.13.192, 1.1.3520.0
- Microsoft Windows_defender
- Microsoft Windows_live_onecare
- N/a — versions n/a
Weakness classification (CWE)
References
- secure@microsoft.com (x_refsource_SECUNIA, Vendor Advisory, third-party-advisory)
- secure@microsoft.com (vdb-entry, x_refsource_BID)
- secure@microsoft.com (vdb-entry, x_refsource_SECTRACK)
- secure@microsoft.com (signature, x_refsource_OVAL, vdb-entry)
- secure@microsoft.com (vdb-entry, x_refsource_VUPEN)
- secure@microsoft.com (x_refsource_HP, vendor-advisory)
- secure@microsoft.com (US Government Resource, x_refsource_CERT, third-party-advisory)
- secure@microsoft.com (x_refsource_MS, vendor-advisory)