Unscored severity · published Dec 11, 2008
CVE-2008-5425
ESet NOD32 2.70.0039.0000 does not properly handle (1) multipart/mixed e-mail messages with many MIME parts and possibly (2) e-mail messages with many "Content-type:…
–
CVSS
2.3%
EPSS
No
On KEV
Description
ESet NOD32 2.70.0039.0000 does not properly handle (1) multipart/mixed e-mail messages with many MIME parts and possibly (2) e-mail messages with many "Content-type: message/rfc822;" headers, which allows remote attackers to cause a denial of service (stack consumption or other resource consumption) via a large e-mail message, a related issue to CVE-2006-1173.
Exploitation
Is it being used?
Exploit prediction (EPSS)2.3% · higher than 83% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
NA
Nod32 Antivirus · Eset
2.70.0039.0000 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2008-5425
CVE.org
https://www.cve.org/CVERecord?id=CVE-2008-5425
Exploit
http://mime.recurity.com/cgi-bin/twiki/view/Main/AttackIntro
securityreason.com
http://securityreason.com/securityalert/4721
www.securityfocus.com
http://www.securityfocus.com/archive/1/499038/100/0/threaded
www.securityfocus.com
http://www.securityfocus.com/archive/1/499045/100/0/threaded
More from Nod32 Antivirus
9.8
CVE-2020-10180
The ESET AV parsing engine allows virus-detection bypass via a crafted BZ2 Checksum field in an archive
8.6
CVE-2023-5594
Improper following of a certificate's chain of trust in ESET security products
7.8
CVE-2024-0353
Local privilege escalation in Windows products
7.8
CVE-2021-37851
Local privilege escalation in Windows products of ESET allows user who is logged into the system to exploit repair feature of the installer to run malicious code with higher…
7.8
CVE-2021-37852
ESET products for Windows allows untrusted process to impersonate the client of a pipe, which can be leveraged by attacker to escalate privileges in the context of NT…