CVE-2008-0309 Stack-based buffer overflow in Symantec Decomposer, as used in certain Symantec antivirus products including Symantec Scan Engine 5.1.2 and other versions before 5.1.6.31, allows remote attackers to e...
MediumCVSS 6.8
EPSS 3.7%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Stack-based buffer overflow in Symantec Decomposer, as used in certain Symantec antivirus products including Symantec Scan Engine 5.1.2 and other versions before 5.1.6.31, allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a malformed RAR file to the Internet Content Adaptation Protocol (ICAP) port (1344/tcp).
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| symantec scan engine | <= 5.1.4.24 | No fix listed |
| symantec antivirus filtering domino mpe | <= 3.0.12 | No fix listed |
| symantec antivirus network attached storage | <= 4.3.16.39 | No fix listed |
| symantec antivirus scan engine | <= 4.3.16.39 | No fix listed |
| symantec antivirus scan engine caching | <= 4.3.16.39 | No fix listed |
| symantec antivirus scan engine clearswift | <= 4.3.16.39 | No fix listed |
| symantec antivirus scan engine for microsoft sharepoint | <= 4.3.16.39 | No fix listed |
| symantec antivirus scan engine for ms isa | <= 4.3.16.39 | No fix listed |
| symantec antivirus scan engine messaging | <= 4.3.16.39 | No fix listed |
| symantec mail security for microsoft exchange | <= 4.6.5.12 | No fix listed |
| symantec mail security for microsoft exchange | <= 5.0.4.363 | No fix listed |
References
- 20080226 Symantec Scan Engine 5.1.2 RAR File Buffer Overflow Vulnerability third-party-advisory
- 29140 third-party-advisory vendor-advisory
- 27913 vdb-entry
- 1019503 vdb-entry
- www.symantec.com
- ADV-2008-0680 vdb-entry