Zero-friction vulnerability management platform

Mageni eases for you the vulnerability scanning, assessment, and management process. It is free and open-source.

Install Now

Available for macOS, Windows, and Linux

App screenshot

CVE-2008-0309

CVE information

Published

14 years ago

Last Modified

11 years ago

CVSSv2.0 Severity

Medium

Impact Analysis

Description

Stack-based buffer overflow in Symantec Decomposer, as used in certain Symantec antivirus products including Symantec Scan Engine 5.1.2 and other versions before 5.1.6.31, allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a malformed RAR file to the Internet Content Adaptation Protocol (ICAP) port (1344/tcp)..

CVSSv2.0 Score

Severity
Medium
Base Score
6.8/10
Exploit Score
8.6/10
Access Vector
Network
Access Complexity
Medium
Authentication Required
None
Impact Score
6.4/10
Confidentiality Impact
Partial
Availability Impact
Partial
Integrity Impact
Partial

Products Affected

CPE Affected Vulnerable Excluding Edit
cpe:2.3:a:symantec:symantec_antivirus_filtering_domino_mpe:*
  Yes
- -
cpe:2.3:a:symantec:symantec_mail_security_for_microsoft_exch
  Yes
- -
cpe:2.3:a:symantec:symantec_antivirus_filtering_domino_mpe:*
  Yes
- -
cpe:2.3:a:symantec:symantec_antivirus_scan_engine_for_ms_isa
  Yes
- -
cpe:2.3:a:symantec:symantec_antivirus_scan_engine_clearswift
  Yes
- -
cpe:2.3:a:symantec:symantec_antivirus_scan_engine:*:*:*:*:*:
  Yes
- -
cpe:2.3:a:symantec:scan_engine:*:*:*:*:*:*:*:*
  Yes
- -
cpe:2.3:a:symantec:symantec_antivirus_scan_engine_for_micros
  Yes
- -
cpe:2.3:a:symantec:symantec_antivirus_scan_engine_messaging:
  Yes
- -
cpe:2.3:a:symantec:symantec_antivirus_scan_engine_caching:*:
  Yes
- -
cpe:2.3:a:symantec:symantec_antivirus_filtering_domino_mpe:*
  Yes
- -
cpe:2.3:a:symantec:symantec_antivirus_network_attached_stora
  Yes
- -
cpe:2.3:a:symantec:symantec_mail_security_for_microsoft_exch
  Yes
- -