CVE-2008-3447 The scanning engine in F-Prot Antivirus 6.2.1 4252 allows remote attackers to cause a denial of service (infinite loop) via a malformed ZIP archive, probably related to invalid offsets.
MediumCVSS 5.0
EPSS 7.9%
- Published
- Updated
- Exploit status
- No public exploit known
Description
The scanning engine in F-Prot Antivirus 6.2.1 4252 allows remote attackers to cause a denial of service (infinite loop) via a malformed ZIP archive, probably related to invalid offsets.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| f-prot antivirus | = 6.2.1.4252 | No fix listed |
| f-prot scanning engine | = 4.4.4.56 | No fix listed |
References
- 20080731 F-PROT antivirus 6.2.1.4252 infinite loop denial of service via malformed archive mailing-list
- 31313 third-party-advisory vendor-advisory
- 30461 vdb-entry
- 1020612 vdb-entry
- ADV-2008-2283 vdb-entry
- fprotantivirus-infiniteloop-dos(44134) vdb-entry
- 6174 exploit