VYPR
← All advisories
Unrated severityNVD Advisory· Published Feb 28, 2008· Updated Jun 16, 2026

CVE-2008-0309

CVE-2008-0309

Description

Stack-based buffer overflow in Symantec Decomposer, as used in certain Symantec antivirus products including Symantec Scan Engine 5.1.2 and other versions before 5.1.6.31, allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a malformed RAR file to the Internet Content Adaptation Protocol (ICAP) port (1344/tcp).

Affected products

13
  • Symantec/Antivirus Scan Engine6 versions
    cpe:2.3:a:symantec:scan_engine:*:*:*:*:*:*:*:*+ 5 more
    • cpe:2.3:a:symantec:scan_engine:*:*:*:*:*:*:*:*range: <=5.1.4.24
    • cpe:2.3:a:symantec:symantec_antivirus_scan_engine:*:*:*:*:*:*:*:*range: <=4.3.16.39
    • cpe:2.3:a:symantec:symantec_antivirus_scan_engine_caching:*:*:*:*:*:*:*:*range: <=4.3.16.39
    • cpe:2.3:a:symantec:symantec_antivirus_scan_engine_clearswift:*:*:*:*:*:*:*:*range: <=4.3.16.39
    • cpe:2.3:a:symantec:symantec_antivirus_scan_engine_for_ms_isa:*:*:*:*:*:*:*:*range: <=4.3.16.39
    • cpe:2.3:a:symantec:symantec_antivirus_scan_engine_messaging:*:*:*:*:*:*:*:*range: <=4.3.16.39
  • Symantec/Symantec Antivirus Filtering Domino Mpe3 versions
    cpe:2.3:a:symantec:symantec_antivirus_filtering_domino_mpe:*:*:aix:*:*:*:*:*+ 2 more
    • cpe:2.3:a:symantec:symantec_antivirus_filtering_domino_mpe:*:*:aix:*:*:*:*:*range: <=3.0.12
    • cpe:2.3:a:symantec:symantec_antivirus_filtering_domino_mpe:*:*:linux:*:*:*:*:*range: <=3.0.12
    • cpe:2.3:a:symantec:symantec_antivirus_filtering_domino_mpe:*:*:solaris:*:*:*:*:*range: <=3.0.12
  • Symantec/Symantec Antivirus Network Attached Storage
    cpe:2.3:a:symantec:symantec_antivirus_network_attached_storage:*:*:*:*:*:*:*:*
    Range: <=4.3.16.39
  • Symantec/Symantec Antivirus Scan Engine For Microsoft Sharepoint
    cpe:2.3:a:symantec:symantec_antivirus_scan_engine_for_microsoft_sharepoint:*:*:*:*:*:*:*:*
    Range: <=4.3.16.39
  • Symantec/Mail Security For Microsoft Exchange
    cpe:2.3:a:symantec:symantec_mail_security_for_microsoft_exchange:*:*:*:*:*:*:*:*
    Range: <=4.6.5.12
  • Symantec/Scan Enginellm-fuzzy
    Range: <5.1.6.31

Patches

Vulnerability mechanics

References

6

News mentions

0

No linked articles in our index yet.