medium6.8

CVE-2008-0309

Stack-based buffer overflow in Symantec Decomposer, as used in certain Symantec antivirus products including Symantec Scan Engine 5.1.2 and other versions befo…

Impact

Stack-based buffer overflow in Symantec Decomposer, as used in certain Symantec antivirus products including Symantec Scan Engine 5.1.2 and other versions before 5.1.6.31, allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a malformed RAR file to the Internet Content Adaptation Protocol (ICAP) port (1344/tcp).

Affected products

Vendor	Product	Affected versions
Symantec	Scan Engine	through 5.1.4.24
Symantec	Symantec Antivirus Filtering Domino Mpe	through 3.0.12
Symantec	Symantec Antivirus Network Attached Storage	through 4.3.16.39
Symantec	Symantec Antivirus Scan Engine	through 4.3.16.39
Symantec	Symantec Antivirus Scan Engine Caching	through 4.3.16.39
Symantec	Symantec Antivirus Scan Engine Clearswift	through 4.3.16.39
Symantec	Symantec Antivirus Scan Engine For Microsoft Sharepoint	through 4.3.16.39
Symantec	Symantec Antivirus Scan Engine For Ms Isa	through 4.3.16.39
Symantec	Symantec Antivirus Scan Engine Messaging	through 4.3.16.39
Symantec	Symantec Mail Security For Microsoft Exchange	through 4.6.5.12 through 5.0.4.363

Weakness classification

CWE-119

Impact

Affected products

Weakness classification

References