NetSight
IP …
medium5.0

CVE-2008-1438

Unspecified vulnerability in Microsoft Malware Protection Engine (mpengine.dll) 1.1.3520.0 and 0.1.13.192, as used in multiple Microsoft products, allows conte…

Impact

Unspecified vulnerability in Microsoft Malware Protection Engine (mpengine.dll) 1.1.3520.0 and 0.1.13.192, as used in multiple Microsoft products, allows context-dependent attackers to cause a denial of service (disk space exhaustion) via a file with "crafted data structures" that trigger the creation of large temporary files, a different vulnerability than CVE-2008-1437.

Affected products

VendorProductAffected versions
MicrosoftAntigen For Exchange
All versions
MicrosoftAntigen For Smtp Gateway
All versions
MicrosoftDiagnostics And Recovery Toolkit
Version 6.0
MicrosoftForefront Client Security
All versions
MicrosoftForefront Security For Exchange Server
All versions
MicrosoftForefront Security For Sharepoint
All versions
MicrosoftMalware Protection Engine
Versions 0.1.13.192, 1.1.3520.0
MicrosoftWindows Defender
All versions
MicrosoftWindows Live Onecare
All versions

Weakness classification

CWE-399

References