CVE-2008-0309
Stack-based buffer overflow in Symantec Decomposer, as used in certain Symantec antivirus products including Symantec Scan Engine 5.1.2 and other versions before 5.1.6.31, allows remote attackers to execute arbitrary code or cause a denial of service…
Does this matter?
Lower severity and a low EPSS score (3.66%). Track it; it rarely justifies an emergency change on its own.
Description
Stack-based buffer overflow in Symantec Decomposer, as used in certain Symantec antivirus products including Symantec Scan Engine 5.1.2 and other versions before 5.1.6.31, allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a malformed RAR file to the Internet Content Adaptation Protocol (ICAP) port (1344/tcp).
- CVSS 2.0
- 6.8 MEDIUMAV:N/AC:M/Au:N/C:P/I:P/A:P
- EPSS
- 3.66% probability · 89th percentile
- CISA KEV
- Not listed
- Weakness
- CWE-119
- Affected
- symantec/scan engine · symantec/symantec antivirus filtering domino mpe · symantec/symantec antivirus network attached storage · symantec/symantec antivirus scan engine · symantec/symantec antivirus scan engine caching · symantec/symantec antivirus scan engine clearswift · symantec/symantec antivirus scan engine for microsoft sharepoint · symantec/symantec antivirus scan engine for ms isa · symantec/symantec antivirus scan engine messaging · symantec/symantec mail security for microsoft exchange
- Source
- cve@mitre.org
References
- http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=667
- http://secunia.com/advisories/29140Vendor Advisory
- http://www.securityfocus.com/bid/27913
- http://www.securitytracker.com/id?1019503
- http://www.symantec.com/avcenter/security/Content/2008.02.27.html
- http://www.vupen.com/english/advisories/2008/0680
- http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=667
- http://secunia.com/advisories/29140Vendor Advisory
- http://www.securityfocus.com/bid/27913
- http://www.securitytracker.com/id?1019503
- http://www.symantec.com/avcenter/security/Content/2008.02.27.html
- http://www.vupen.com/english/advisories/2008/0680
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.