Instituto Nacional de ciberseguridad. Sección Incibe
Instituto Nacional de Ciberseguridad. Sección INCIBE-CERT

Go to Calendar     Go to Press Room     Go to Newsletters subscription

Search

CVE-2008-3244

Severity CVSS v4.0:
Pending analysis
Type:
CWE-20 Input Validation
Publication date:
21/07/2008
Last modified:
08/08/2017

Description

The scanning engine before 4.4.4 in F-Prot Antivirus before 6.0.9.0 allows remote attackers to cause a denial of service (engine crash) via a CHM file with a large nb_dir value that triggers an out-of-bounds read.

Impact

Vector 2.0
AV:N/AC:M/Au:N/C:N/I:N/A:P CVSS v2.0 Severity and Metrics:

Base Score: 4.30 MEDIUM
Vector: AV:N/AC:M/Au:N/C:N/I:N/A:P

Attack Vector (AV): Network
Attack Complexity (AC): Medium
Authentication (Au): None
Confidentiality (C): None
Integrity (I): None
Availability (A): Physical

Base Score 2.0
4.30
Severity 2.0
MEDIUM

Vulnerable products and versions

CPE From Up to
cpe:2.3:a:f-prot:f-prot_antivirus:3.11b:*:*:*:*:*:*:*
cpe:2.3:a:f-prot:f-prot_antivirus:3.12:*:*:*:*:*:*:*
cpe:2.3:a:f-prot:f-prot_antivirus:3.12a:*:*:*:*:*:*:*
cpe:2.3:a:f-prot:f-prot_antivirus:3.12b:*:*:*:*:*:*:*
cpe:2.3:a:f-prot:f-prot_antivirus:3.12c:*:*:*:*:*:*:*
cpe:2.3:a:f-prot:f-prot_antivirus:3.12d:*:*:*:*:*:*:*
cpe:2.3:a:f-prot:f-prot_antivirus:3.13:*:*:*:*:*:*:*
cpe:2.3:a:f-prot:f-prot_antivirus:3.13a:*:*:*:*:*:*:*
cpe:2.3:a:f-prot:f-prot_antivirus:3.14:*:*:*:*:*:*:*
cpe:2.3:a:f-prot:f-prot_antivirus:3.14a:*:*:*:*:*:*:*
cpe:2.3:a:f-prot:f-prot_antivirus:3.14b:*:*:*:*:*:*:*
cpe:2.3:a:f-prot:f-prot_antivirus:3.14c:*:*:*:*:*:*:*
cpe:2.3:a:f-prot:f-prot_antivirus:3.14d:*:*:*:*:*:*:*
cpe:2.3:a:f-prot:f-prot_antivirus:3.14e:*:*:*:*:*:*:*
cpe:2.3:a:f-prot:f-prot_antivirus:3.15:*:*:*:*:*:*:*

To consult the complete list of CPE names with products and versions, see this page


References to Advisories, Solutions, and Tools