CVEvulnerability

CVE-2008-3244

4.3 MEDIUM Published 2008-07-21 Modified 2026-06-16 Official page ↗
Status
Modified
Published
2008-07-21
Last modified
2026-06-16
Assigner
[email protected]
CVSS 2.0 ([email protected])
4.3 MEDIUM — AV:N/AC:M/Au:N/C:N/I:N/A:P
Weaknesses
CWE-20

Description

The scanning engine before 4.4.4 in F-Prot Antivirus before 6.0.9.0 allows remote attackers to cause a denial of service (engine crash) via a CHM file with a large nb_dir value that triggers an out-of-bounds read.

Affected configurations

• f-prot f-prot antivirus 3.11b • f-prot f-prot antivirus 3.12 • f-prot f-prot antivirus 3.12a • f-prot f-prot antivirus 3.12b • f-prot f-prot antivirus 3.12c • f-prot f-prot antivirus 3.12d • f-prot f-prot antivirus 3.13 • f-prot f-prot antivirus 3.13a • f-prot f-prot antivirus 3.14 • f-prot f-prot antivirus 3.14a • f-prot f-prot antivirus 3.14b • f-prot f-prot antivirus 3.14c • f-prot f-prot antivirus 3.14d • f-prot f-prot antivirus 3.14e • f-prot f-prot antivirus 3.15 • f-prot f-prot antivirus 3.15a • f-prot f-prot antivirus 3.15b • f-prot f-prot antivirus 3.16 • f-prot f-prot antivirus 3.16a • f-prot f-prot antivirus 3.16b • f-prot f-prot antivirus 3.16c • f-prot f-prot antivirus 3.16d • f-prot f-prot antivirus 3.16e • f-prot f-prot antivirus 3.16f • f-prot f-prot antivirus 4.6.6 • f-prot f-prot antivirus 6.0.5 • f-prot f-prot antivirus 6.0.5.1 • f-prot f-prot antivirus 6.0.6 • f-prot f-prot antivirus 6.0.6.1 • f-prot f-prot antivirus 6.0.6.3 • f-prot f-prot antivirus 6.0.6.4 • f-prot f-prot antivirus 6.0.7 • f-prot f-prot antivirus 6.0.7.1 • f-prot f-prot antivirus 6.0.8 • f-prot scanning engine (<= 4.3.2)

Related

Weakness · CWE (1)

  • CWE-20 Improper Input Validation weakness

References