![]() |
Home ▼ Bookkeeping
Online ▼ Security
Audits ▼
Managed
DNS ▼
About
Order
FAQ
Acceptable Use Policy
Dynamic DNS Clients
Configure Domains Dyanmic DNS Update Password Network
Monitor ▼
Enterprise Package
Advanced Package
Standard Package
Free Trial
FAQ
Price/Feature Summary
Order/Renew
Examples
Configure/Status Alert Profiles | ||
Test ID: | 1.3.6.1.4.1.25623.1.0.900018 |
Category: | Denial of Service |
Title: | F-PROT Antivirus Multiple DoS Vulnerabilities |
Summary: | F-PROT Antivirus is prone to multiple denial of service (DoS); vulnerabilities. |
Description: | Summary: F-PROT Antivirus is prone to multiple denial of service (DoS) vulnerabilities. Vulnerability Insight: The issues are due to: - input validation error while processing the nb_dir field of CHM file's header. - improper handling of specially crafted UPX-compressed files, Microsoft Office files, and ASPack-compressed files. Vulnerability Impact: Remote attackers can easily crash the engine/service via specially crafted files. Affected Software/OS: F-Prot Antivirus for Windows prior to 6.0.9.0 on Windows (All). Solution: Upgrade to latest F-PROT Antivirus or later. CVSS Score: 4.3 CVSS Vector: AV:N/AC:M/Au:N/C:N/I:N/A:P |
Cross-Ref: |
Common Vulnerability Exposure (CVE) ID: CVE-2008-3244 BugTraq ID: 30253 http://www.securityfocus.com/bid/30253 http://www.nruns.com/security_advisory_fprot_out-of-bound_memory_access_DoS.php http://www.securitytracker.com/id?1020507 http://secunia.com/advisories/31118 http://www.vupen.com/english/advisories/2008/2124/references XForce ISS Database: fprotantivirus-chm-dos(43835) https://exchange.xforce.ibmcloud.com/vulnerabilities/43835 |
Copyright | Copyright (C) 2008 Greenbone AG |
This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below. |