Lucene search

[email protected]CVE-2008-3244

HistoryJul 21, 2008 - 4:41 p.m.

CVE-2008-3244

2008-07-2116:41:00

CWE-20

[email protected]

web.nvd.nist.gov

f-prot antivirus

cve-2008-3244

denial of service

vulnerability

nvd

4.3 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:N/I:N/A:P

6.3 Medium

AI Score

Confidence

Low

0.016 Low

EPSS

Percentile

87.5%

JSON

The scanning engine before 4.4.4 in F-Prot Antivirus before 6.0.9.0 allows remote attackers to cause a denial of service (engine crash) via a CHM file with a large nb_dir value that triggers an out-of-bounds read.

Affected configurations

NVD

Node

f-protf-prot_antivirusMatch3.11b

f-protf-prot_antivirusMatch3.12

f-protf-prot_antivirusMatch3.12a

f-protf-prot_antivirusMatch3.12b

f-protf-prot_antivirusMatch3.12c

f-protf-prot_antivirusMatch3.12d

f-protf-prot_antivirusMatch3.13

f-protf-prot_antivirusMatch3.13a

f-protf-prot_antivirusMatch3.14

f-protf-prot_antivirusMatch3.14a

f-protf-prot_antivirusMatch3.14b

f-protf-prot_antivirusMatch3.14c

f-protf-prot_antivirusMatch3.14d

f-protf-prot_antivirusMatch3.14e

f-protf-prot_antivirusMatch3.15

f-protf-prot_antivirusMatch3.15a

f-protf-prot_antivirusMatch3.15b

f-protf-prot_antivirusMatch3.16

f-protf-prot_antivirusMatch3.16a

f-protf-prot_antivirusMatch3.16b

f-protf-prot_antivirusMatch3.16c

f-protf-prot_antivirusMatch3.16d

f-protf-prot_antivirusMatch3.16e

f-protf-prot_antivirusMatch3.16f

f-protf-prot_antivirusMatch4.6.6

f-protf-prot_antivirusMatch6.0.5

f-protf-prot_antivirusMatch6.0.5.1

f-protf-prot_antivirusMatch6.0.6

f-protf-prot_antivirusMatch6.0.6.1

f-protf-prot_antivirusMatch6.0.6.3

f-protf-prot_antivirusMatch6.0.6.4

f-protf-prot_antivirusMatch6.0.7

f-protf-prot_antivirusMatch6.0.7.1

f-protf-prot_antivirusMatch6.0.8

f-protscanning_engineRange≤4.3.2

CPENameOperatorVersion
f-prot:f-prot_antivirusf-prot f-prot antiviruseq3.11b
f-prot:f-prot_antivirusf-prot f-prot antiviruseq3.12
f-prot:f-prot_antivirusf-prot f-prot antiviruseq3.12a
f-prot:f-prot_antivirusf-prot f-prot antiviruseq3.12b
f-prot:f-prot_antivirusf-prot f-prot antiviruseq3.12c
f-prot:f-prot_antivirusf-prot f-prot antiviruseq3.12d
f-prot:f-prot_antivirusf-prot f-prot antiviruseq3.13
f-prot:f-prot_antivirusf-prot f-prot antiviruseq3.13a
f-prot:f-prot_antivirusf-prot f-prot antiviruseq3.14
f-prot:f-prot_antivirusf-prot f-prot antiviruseq3.14a

CPE	Name	Operator	Version
f-prot:f-prot_antivirus	f-prot f-prot antivirus	eq	3.11b
f-prot:f-prot_antivirus	f-prot f-prot antivirus	eq	3.12
f-prot:f-prot_antivirus	f-prot f-prot antivirus	eq	3.12a
f-prot:f-prot_antivirus	f-prot f-prot antivirus	eq	3.12b
f-prot:f-prot_antivirus	f-prot f-prot antivirus	eq	3.12c
f-prot:f-prot_antivirus	f-prot f-prot antivirus	eq	3.12d
f-prot:f-prot_antivirus	f-prot f-prot antivirus	eq	3.13
f-prot:f-prot_antivirus	f-prot f-prot antivirus	eq	3.13a
f-prot:f-prot_antivirus	f-prot f-prot antivirus	eq	3.14
f-prot:f-prot_antivirus	f-prot f-prot antivirus	eq	3.14a