CVE-2008-0309
Estado: ModificadaMedia (6.8)—
Stack-based buffer overflow in Symantec Decomposer, as used in certain Symantec antivirus products including Symantec Scan Engine 5.1.2 and other versions before 5.1.6.31, allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a malformed RAR file to the Internet Content Adaptation Protocol (ICAP) port (1344/tcp).
CVSS
- Versión: 2.0
- Vector: AV:N/AC:M/Au:N/C:P/I:P/A:P
- Puntuación base: 6.8
Probabilidad de explotación (EPSS)
- Probabilidad de explotación en los próximos 30 días: 3.66%
- Percentil entre todas las CVEs puntuadas: 89
- Fecha de la puntuación: 5/10/2026
EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).
Tecnologías afectadas (10)
Symantec — Scan EngineSymantec — Symantec Antivirus Filtering Domino MPESymantec — Symantec Antivirus Network Attached StorageSymantec — Symantec Antivirus Scan EngineSymantec — Symantec Antivirus Scan Engine CachingSymantec — Symantec Antivirus Scan Engine ClearswiftSymantec — Symantec Antivirus Scan Engine FOR Microsoft SharepointSymantec — Symantec Antivirus Scan Engine FOR MS ISASymantec — Symantec Antivirus Scan Engine MessagingSymantec — Symantec Mail Security FOR Microsoft Exchange
CWE
- CWE-119
Referencias
- http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=667
- http://secunia.com/advisories/29140
- http://www.securityfocus.com/bid/27913
- http://www.securitytracker.com/id?1019503
- http://www.symantec.com/avcenter/security/Content/2008.02.27.html
- http://www.vupen.com/english/advisories/2008/0680
- http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=667
- http://secunia.com/advisories/29140
- http://www.securityfocus.com/bid/27913
- http://www.securitytracker.com/id?1019503
- http://www.symantec.com/avcenter/security/Content/2008.02.27.html
- http://www.vupen.com/english/advisories/2008/0680
JSON original (NVD)
Mostrar
{
"id": "CVE-2008-0309",
"cveTags": [],
"metrics": {
"cvssMetricV2": [
{
"type": "Primary",
"source": "nvd@nist.gov",
"cvssData": {
"version": "2.0",
"baseScore": 6.8,
"accessVector": "NETWORK",
"vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
"authentication": "NONE",
"integrityImpact": "PARTIAL",
"accessComplexity": "MEDIUM",
"availabilityImpact": "PARTIAL",
"confidentialityImpact": "PARTIAL"
},
"acInsufInfo": false,
"impactScore": 6.4,
"baseSeverity": "MEDIUM",
"obtainAllPrivilege": false,
"exploitabilityScore": 8.6,
"obtainUserPrivilege": false,
"obtainOtherPrivilege": true,
"userInteractionRequired": true
}
]
},
"affected": [
{
"source": "cve@mitre.org",
"affectedData": [
{
"vendor": "n/a",
"product": "n/a",
"versions": [
{
"status": "affected",
"version": "n/a"
}
]
}
]
}
],
"published": "2008-02-28T20:44:00.000",
"references": [
{
"url": "http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=667",
"source": "cve@mitre.org"
},
{
"url": "http://secunia.com/advisories/29140",
"tags": [
"Vendor Advisory"
],
"source": "cve@mitre.org"
},
{
"url": "http://www.securityfocus.com/bid/27913",
"source": "cve@mitre.org"
},
{
"url": "http://www.securitytracker.com/id?1019503",
"source": "cve@mitre.org"
},
{
"url": "http://www.symantec.com/avcenter/security/Content/2008.02.27.html",
"source": "cve@mitre.org"
},
{
"url": "http://www.vupen.com/english/advisories/2008/0680",
"source": "cve@mitre.org"
},
{
"url": "http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=667",
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "http://secunia.com/advisories/29140",
"tags": [
"Vendor Advisory"
],
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "http://www.securityfocus.com/bid/27913",
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "http://www.securitytracker.com/id?1019503",
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "http://www.symantec.com/avcenter/security/Content/2008.02.27.html",
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "http://www.vupen.com/english/advisories/2008/0680",
"source": "af854a3a-2127-422b-91ae-364da2661108"
}
],
"vulnStatus": "Modified",
"weaknesses": [
{
"type": "Primary",
"source": "nvd@nist.gov",
"description": [
{
"lang": "en",
"value": "CWE-119"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "Stack-based buffer overflow in Symantec Decomposer, as used in certain Symantec antivirus products including Symantec Scan Engine 5.1.2 and other versions before 5.1.6.31, allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a malformed RAR file to the Internet Content Adaptation Protocol (ICAP) port (1344/tcp)."
},
{
"lang": "es",
"value": "Vulnerabilidad de Desbordamiento de búfer basado en pila en Symantec Decomposer incluído en productos como Symantec Scan Engine 5.1.2 y versiones anteriores a 5.1.6.31, que permite a atacantes remotos ejecutar código de su elección o causar una denegación de servicio (caída de aplicación) a través de un fichero RAR mal formado al puerto (1344/tcp) Internet Content Adaptation Protocol (ICAP)"
}
],
"lastModified": "2026-06-16T22:49:21.923",
"configurations": [
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:a:symantec:scan_engine:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "AB87EEAE-C3E0-4145-B218-9D408F92019D",
"versionEndIncluding": "5.1.4.24"
},
{
"criteria": "cpe:2.3:a:symantec:symantec_antivirus_filtering_domino_mpe:*:*:aix:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "16D7344B-86C6-4F85-A3BC-F0923BE01BBA",
"versionEndIncluding": "3.0.12"
},
{
"criteria": "cpe:2.3:a:symantec:symantec_antivirus_filtering_domino_mpe:*:*:linux:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "852B500B-D411-4423-95A8-EEC05AFEAC31",
"versionEndIncluding": "3.0.12"
},
{
"criteria": "cpe:2.3:a:symantec:symantec_antivirus_filtering_domino_mpe:*:*:solaris:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "C0B93FAE-4014-4417-A46A-3F52667E223F",
"versionEndIncluding": "3.0.12"
},
{
"criteria": "cpe:2.3:a:symantec:symantec_antivirus_network_attached_storage:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "90C81F8F-8176-4EB2-B61B-08A3F8958628",
"versionEndIncluding": "4.3.16.39"
},
{
"criteria": "cpe:2.3:a:symantec:symantec_antivirus_scan_engine:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "E648A3CF-2DB0-4578-8FF4-E8DB7DEE249F",
"versionEndIncluding": "4.3.16.39"
},
{
"criteria": "cpe:2.3:a:symantec:symantec_antivirus_scan_engine_caching:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "F10B5FA2-D60A-4ECD-98D5-24E2AC227604",
"versionEndIncluding": "4.3.16.39"
},
{
"criteria": "cpe:2.3:a:symantec:symantec_antivirus_scan_engine_clearswift:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "DAE997E4-3686-433C-94A8-1F039F6A5FD2",
"versionEndIncluding": "4.3.16.39"
},
{
"criteria": "cpe:2.3:a:symantec:symantec_antivirus_scan_engine_for_microsoft_sharepoint:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "10C9C1CB-1E4F-48D8-A5CA-322C2944EF5E",
"versionEndIncluding": "4.3.16.39"
},
{
"criteria": "cpe:2.3:a:symantec:symantec_antivirus_scan_engine_for_ms_isa:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "64B57FBE-71D4-4392-BA76-B3B6BED94A6C",
"versionEndIncluding": "4.3.16.39"
},
{
"criteria": "cpe:2.3:a:symantec:symantec_antivirus_scan_engine_messaging:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "49FEB258-2259-4E24-BDAC-A857B4C98095",
"versionEndIncluding": "4.3.16.39"
},
{
"criteria": "cpe:2.3:a:symantec:symantec_mail_security_for_microsoft_exchange:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "EF5109EC-23D1-4100-8F5E-751B566CE75D",
"versionEndIncluding": "4.6.5.12"
},
{
"criteria": "cpe:2.3:a:symantec:symantec_mail_security_for_microsoft_exchange:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "48264D1D-94A1-49C1-A57D-34074C582630",
"versionEndIncluding": "5.0.4.363"
}
],
"operator": "OR"
}
]
}
],
"sourceIdentifier": "cve@mitre.org"
}