CVEvulnerability
CVE-2008-3244
4.3 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2008-07-21
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 4.3 MEDIUM — AV:N/AC:M/Au:N/C:N/I:N/A:P
- Weaknesses
- CWE-20
Description
The scanning engine before 4.4.4 in F-Prot Antivirus before 6.0.9.0 allows remote attackers to cause a denial of service (engine crash) via a CHM file with a large nb_dir value that triggers an out-of-bounds read.
Affected configurations
• f-prot f-prot antivirus 3.11b
• f-prot f-prot antivirus 3.12
• f-prot f-prot antivirus 3.12a
• f-prot f-prot antivirus 3.12b
• f-prot f-prot antivirus 3.12c
• f-prot f-prot antivirus 3.12d
• f-prot f-prot antivirus 3.13
• f-prot f-prot antivirus 3.13a
• f-prot f-prot antivirus 3.14
• f-prot f-prot antivirus 3.14a
• f-prot f-prot antivirus 3.14b
• f-prot f-prot antivirus 3.14c
• f-prot f-prot antivirus 3.14d
• f-prot f-prot antivirus 3.14e
• f-prot f-prot antivirus 3.15
• f-prot f-prot antivirus 3.15a
• f-prot f-prot antivirus 3.15b
• f-prot f-prot antivirus 3.16
• f-prot f-prot antivirus 3.16a
• f-prot f-prot antivirus 3.16b
• f-prot f-prot antivirus 3.16c
• f-prot f-prot antivirus 3.16d
• f-prot f-prot antivirus 3.16e
• f-prot f-prot antivirus 3.16f
• f-prot f-prot antivirus 4.6.6
• f-prot f-prot antivirus 6.0.5
• f-prot f-prot antivirus 6.0.5.1
• f-prot f-prot antivirus 6.0.6
• f-prot f-prot antivirus 6.0.6.1
• f-prot f-prot antivirus 6.0.6.3
• f-prot f-prot antivirus 6.0.6.4
• f-prot f-prot antivirus 6.0.7
• f-prot f-prot antivirus 6.0.7.1
• f-prot f-prot antivirus 6.0.8
• f-prot scanning engine (<= 4.3.2)
Related
Weakness · CWE (1)
- CWE-20 Improper Input Validation weakness
References
- http://secunia.com/advisories/31118 Vendor Advisory
- http://www.f-prot.com/download/ReleaseNotesWindows.txt www.f-prot.com
- http://www.nruns.com/security_advisory_fprot_out-of-bound_memory_access_DoS.php www.nruns.com
- http://www.securityfocus.com/bid/30253 www.securityfocus.com
- http://www.securitytracker.com/id?1020507 www.securitytracker.com
- http://www.vupen.com/english/advisories/2008/2124/references www.vupen.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/43835 exchange.xforce.ibmcloud.com
- http://secunia.com/advisories/31118 Vendor Advisory
- http://www.f-prot.com/download/ReleaseNotesWindows.txt www.f-prot.com
- http://www.nruns.com/security_advisory_fprot_out-of-bound_memory_access_DoS.php www.nruns.com
- http://www.securityfocus.com/bid/30253 www.securityfocus.com
- http://www.securitytracker.com/id?1020507 www.securitytracker.com
- http://www.vupen.com/english/advisories/2008/2124/references www.vupen.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/43835 exchange.xforce.ibmcloud.com