CVE-2008-0308

Symantec Decomposer, as used in certain Symantec antivirus products including Symantec Scan Engine 5.1.2 and other versions before 5.1.6.31, allows remote attackers to cause a denial of service (memory consumption) via a malformed RAR file to the Internet Content Adaptation Protocol (ICAP) port (1344/tcp).

• symantec scan engine (<= 5.1.4.24) • symantec symantec antivirus clearswift (<= 4.3.16.39) • symantec symantec antivirus filtering domino mpe (<= 3.0.12) • symantec symantec antivirus messaging (<= 4.3.16.39) • symantec symantec antivirus microsoft sharepoint (<= 4.3.16.39) • symantec symantec antivirus ms isa (<= 4.3.16.39) • symantec symantec antivirus network attached storage (<= 4.3.16.39) • symantec symantec antivirus scan engine (<= 4.3.16.39) • symantec symantec antivirus scan engine caching (<= 4.3.16.39) • symantec symantec mail security exchange (<= 4.6.5.12) • symantec symantec mail security exchange (<= 5.0.4.363)