CVE-2008-0309

Stack-based buffer overflow in Symantec Decomposer, as used in certain Symantec antivirus products including Symantec Scan Engine 5.1.2 and other versions before 5.1.6.31, allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a malformed RAR file to the Internet Content Adaptation Protocol (ICAP) port (1344/tcp).

Link	Resource
http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=667
http://www.symantec.com/avcenter/security/Content/2008.02.27.html
http://www.securityfocus.com/bid/27913
http://secunia.com/advisories/29140	Vendor Advisory
http://www.securitytracker.com/id?1019503
http://www.vupen.com/english/advisories/2008/0680

Configuration 1

cpe:2.3:a:symantec:symantec_antivirus_filtering_domino_mpe:*:*:solaris:*:*:*:*:* cpe:2.3:a:symantec:symantec_mail_security_for_microsoft_exchange:*:*:*:*:*:*:*:* cpe:2.3:a:symantec:symantec_antivirus_filtering_domino_mpe:*:*:aix:*:*:*:*:* cpe:2.3:a:symantec:symantec_antivirus_scan_engine_for_ms_isa:*:*:*:*:*:*:*:* cpe:2.3:a:symantec:symantec_antivirus_scan_engine_clearswift:*:*:*:*:*:*:*:* cpe:2.3:a:symantec:symantec_antivirus_scan_engine:*:*:*:*:*:*:*:* cpe:2.3:a:symantec:scan_engine:*:*:*:*:*:*:*:* cpe:2.3:a:symantec:symantec_antivirus_scan_engine_for_microsoft_sharepoint:*:*:*:*:*:*:*:* cpe:2.3:a:symantec:symantec_antivirus_scan_engine_messaging:*:*:*:*:*:*:*:* cpe:2.3:a:symantec:symantec_antivirus_scan_engine_caching:*:*:*:*:*:*:*:* cpe:2.3:a:symantec:symantec_antivirus_filtering_domino_mpe:*:*:linux:*:*:*:*:* cpe:2.3:a:symantec:symantec_mail_security_for_microsoft_exchange:*:*:*:*:*:*:*:* cpe:2.3:a:symantec:symantec_antivirus_network_attached_storage:*:*:*:*:*:*:*:*

---

Published : 2008-02-28 08:44

Updated : 2011-03-08 03:04

---

NVD link : CVE-2008-0309

Mitre link : CVE-2008-0309

No products.

CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer