CVE-2008-3243

Multiple unspecified vulnerabilities in the scanning engine before 4.4.4 in F-Prot Antivirus before 6.0.9.0 allow remote attackers to cause a denial of service via (1) a crafted UPX-compressed file, which triggers an engine crash; (2) a crafted Microsoft Office file, which triggers an infinite loop; or (3) an ASPack-compressed file, which triggers an engine crash.

Score

CVSS 2.0 4.3 Medium

Status

Modified - cve@mitre.org

Published

2008-07-21

Last modified

2024-08-07

Weaknesses

CWE-20

Affected products

• F-prot Antivirus (F-prot)
• Scanning Engine (F-prot)

References

• http://secunia.com/advisories/31118
• http://www.f-prot.com/download/ReleaseNotesWindows.txt
• http://www.securityfocus.com/bid/30258
• https://exchange.xforce.ibmcloud.com/vulnerabilities/43868
• https://exchange.xforce.ibmcloud.com/vulnerabilities/43869
• https://exchange.xforce.ibmcloud.com/vulnerabilities/43870