NVD

Id
293  
Name
CVE-2008-0309  
Description
Stack-based buffer overflow in Symantec Decomposer, as used in certain Symantec antivirus products including Symantec Scan Engine 5.1.2 and other versions before 5.1.6.31, allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a malformed RAR file to the Internet Content Adaptation Protocol (ICAP) port (1344/tcp).  
Reject
 
CVSS Version
2  
CVSS Score
6.8  
Severity
Medium  
CVSS Base Score
6.8  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:P/I:P/A:P)  
Pub Date
2017-01-03  
Published
2008-02-28  
Modified Date
2011-03-07  
Seq
2008-0309  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
1965 293 CVE-2008-0309 20080226 Symantec Scan Engine 5.1.2 RAR File Buffer Overflow Vulnerability  View
1966 293 CVE-2008-0309 27913  View
1967 293 CVE-2008-0309 1019503  View
1968 293 CVE-2008-0309 http://www.symantec.com/avcenter/security/Content/2008.02.27.html  View
1969 293 CVE-2008-0309 ADV-2008-0680  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
50073 JVNDB-2008-005383 Symantec Scan Engine を含む特定の Symantec アンチウイルス製品で使用される Symantec Decomposer におけるスタックベースのバッファオーバーフローの脆弱性 Symantec Scan Engine を含む特定の Symantec アンチウイルス製品で使用される Symantec Decomposer には、スタックベースのバッファオーバーフローの脆弱性が存在します。 CVE-2008-0309 30422 CVE-2008-0309 293 6.8 http://jvndb.jvn.jp/ja/contents/2008/JVNDB-2008-005383.html 2008-02-26 2012-12-20 View