Unscored severity · published Jul 21, 2008
CVE-2008-3244
The scanning engine before 4.4.4 in F-Prot Antivirus before 6.0.9.0 allows remote attackers to cause a denial of service (engine crash) via a CHM file with a large nb_dir value…
–
CVSS
2.2%
EPSS
No
On KEV
Description
The scanning engine before 4.4.4 in F-Prot Antivirus before 6.0.9.0 allows remote attackers to cause a denial of service (engine crash) via a CHM file with a large nb_dir value that triggers an out-of-bounds read.
Exploitation
Is it being used?
Exploit prediction (EPSS)2.2% · higher than 83% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
FA
F-prot Antivirus · F-prot
3.11b; 3.12; 3.12a; 3.12b; 3.12c; 3.12d; +28 more · source: NVD
SE
Scanning Engine · F-prot
through 4.3.2 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2008-3244
CVE.org
https://www.cve.org/CVERecord?id=CVE-2008-3244
Vendor Advisory
http://secunia.com/advisories/31118
www.f-prot.com
http://www.f-prot.com/download/ReleaseNotesWindows.txt
www.nruns.com
http://www.nruns.com/security_advisory_fprot_out-of-bound_memory_access_DoS.php
www.securityfocus.com
http://www.securityfocus.com/bid/30253
www.securitytracker.com
http://www.securitytracker.com/id?1020507
www.vupen.com
http://www.vupen.com/english/advisories/2008/2124/references
More from F-prot Antivirus
–
CVE-2012-1463
The ELF file parser in AhnLab V3 Internet Security 2011.01.18.00, Bitdefender 7.2, Quick Heal (aka Cat QuickHeal) 11.00, Command Antivirus 5.2.11.5, Comodo Antivirus 7424, eSafe…
–
CVE-2012-1460
The Gzip file parser in Antiy Labs AVL SDK 2.0.3.7, Quick Heal (aka Cat QuickHeal) 11.00, Command Antivirus 5.2.11.5, eSafe 7.0.17.0, F-Prot Antivirus 4.6.2.117, Jiangmin…
–
CVE-2012-1459
The TAR file parser in AhnLab V3 Internet Security 2011.01.18.00, Avira AntiVir 7.11.1.163, Antiy Labs AVL SDK 2.0.3.7, avast! Antivirus 4.8.1351.0 and 5.0.677.0, AVG Anti-Virus…
–
CVE-2012-1457
The TAR file parser in Avira AntiVir 7.11.1.163, Antiy Labs AVL SDK 2.0.3.7, avast! Antivirus 4.8.1351.0 and 5.0.677.0, AVG Anti-Virus 10.0.0.1190, Bitdefender 7.2, Quick Heal…
–
CVE-2012-1456
The TAR file parser in AVG Anti-Virus 10.0.0.1190, Quick Heal (aka Cat QuickHeal) 11.00, Comodo Antivirus 7424, Emsisoft Anti-Malware 5.1.0.1, eSafe 7.0.17.0, F-Prot Antivirus…