CVE-2008-1437 Unspecified vulnerability in Microsoft Malware Protection Engine (mpengine.dll) 1.1.3520.0 and 0.1.13.192, as used in multiple Microsoft products, allows context-dependent attackers to cause a denial....
MediumCVSS 5.0
EPSS 12.9%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Unspecified vulnerability in Microsoft Malware Protection Engine (mpengine.dll) 1.1.3520.0 and 0.1.13.192, as used in multiple Microsoft products, allows context-dependent attackers to cause a denial of service (engine hang and restart) via a crafted file, a different vulnerability than CVE-2008-1438.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Microsoft antigen for exchange | All versions | No fix listed |
| Microsoft antigen for smtp gateway | All versions | No fix listed |
| Microsoft diagnostics and recovery toolkit | = 6.0 | No fix listed |
| Microsoft forefront client security | All versions | No fix listed |
| Microsoft forefront security for exchange server | All versions | No fix listed |
| Microsoft forefront security for sharepoint | All versions | No fix listed |
| Microsoft malware protection engine | = 0.1.13.192 | No fix listed |
| Microsoft malware protection engine | = 1.1.3520.0 | No fix listed |
| Microsoft Windows Defender | All versions | No fix listed |
| Microsoft windows live onecare | All versions | No fix listed |
References
- SSRT080071 vendor-advisory
- 30172 third-party-advisory vendor-advisory
- 29060 vdb-entry
- 1020016 vdb-entry
- TA08-134A third-party-advisory us-government-resource
- ADV-2008-1506 vdb-entry
- MS08-029 vendor-advisory
- oval:org.mitre.oval:def:13981 signature vdb-entry