CVE-2008-0309

Stack-based buffer overflow in Symantec Decomposer, as used in certain Symantec antivirus products including Symantec Scan Engine 5.1.2 and other versions before 5.1.6.31, allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a malformed RAR file to the Internet Content Adaptation Protocol (ICAP) port (1344/tcp).

Score

CVSS 2.0 6.8 Medium

Status

Modified - cve@mitre.org

Published

2008-02-28

Last modified

2024-08-07

Weaknesses

CWE-119

Affected products

• Scan Engine (Symantec)
• Symantec Antivirus Filtering Domino Mpe (Symantec)
• Symantec Antivirus Network Attached Storage (Symantec)
• Symantec Antivirus Scan Engine (Symantec)
• Symantec Antivirus Scan Engine Caching (Symantec)
• Symantec Antivirus Scan Engine Clearswift (Symantec)
• Symantec Antivirus Scan Engine For Microsoft Sharepoint (Symantec)
• Symantec Antivirus Scan Engine For Ms Isa (Symantec)
• Symantec Antivirus Scan Engine Messaging (Symantec)
• Symantec Mail Security For Microsoft Exchange (Symantec)

References

• http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=667
• http://secunia.com/advisories/29140
• http://www.securityfocus.com/bid/27913
• http://www.securitytracker.com/id?1019503
• http://www.symantec.com/avcenter/security/Content/2008.02.27.html
• http://www.vupen.com/english/advisories/2008/0680