high7.1

CVE-2008-0308

Symantec Decomposer, as used in certain Symantec antivirus products including Symantec Scan Engine 5.1.2 and other versions before 5.1.6.31, allows remote atta…

Impact

Symantec Decomposer, as used in certain Symantec antivirus products including Symantec Scan Engine 5.1.2 and other versions before 5.1.6.31, allows remote attackers to cause a denial of service (memory consumption) via a malformed RAR file to the Internet Content Adaptation Protocol (ICAP) port (1344/tcp).

Affected products

Vendor	Product	Affected versions
Symantec	Scan Engine	through 5.1.4.24
Symantec	Symantec Antivirus Clearswift	through 4.3.16.39
Symantec	Symantec Antivirus Filtering Domino Mpe	through 3.0.12
Symantec	Symantec Antivirus Messaging	through 4.3.16.39
Symantec	Symantec Antivirus Microsoft Sharepoint	through 4.3.16.39
Symantec	Symantec Antivirus Ms Isa	through 4.3.16.39
Symantec	Symantec Antivirus Network Attached Storage	through 4.3.16.39
Symantec	Symantec Antivirus Scan Engine	through 4.3.16.39
Symantec	Symantec Antivirus Scan Engine Caching	through 4.3.16.39
Symantec	Symantec Mail Security Exchange	through 4.6.5.12 through 5.0.4.363

Weakness classification

CWE-399

Impact

Affected products

Weakness classification

References