CVE-2008-3243 - CVE House
Back to Database
Status published Medium CVE-2008-3243

Multiple unspecified vulnerabilities in the scanning engine before 4.4.4 in...

Vulnerability Description

Multiple unspecified vulnerabilities in the scanning engine before 4.4.4 in F-Prot Antivirus before 6.0.9.0 allow remote attackers to cause a denial of service via (1) a crafted UPX-compressed file, which triggers an engine crash; (2) a crafted Microsoft Office file, which triggers an infinite loop; or (3) an ASPack-compressed file, which triggers an engine crash.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2008-3243

Credits & Attribution

No credits recorded in the NVD database.

References

More from f-prot

View All →
CVE-2009-1783
Multiple FRISK Software F-Prot anti-virus products, including Antivirus for Exchange,...
Critical 10
CVE-2008-5747
F-Prot 4.6.8 for GNU/Linux allows remote attackers to bypass anti-virus...
Medium 5
CVE-2008-3447
The scanning engine in F-Prot Antivirus 6.2.1 4252 allows remote...
Medium 5
CVE-2008-3244
The scanning engine before 4.4.4 in F-Prot Antivirus before 6.0.9.0...
Medium 4.3
CVE-2006-6407
F-Prot Antivirus for Linux x86 Mail Servers 4.6.6 allows remote...
Medium 5

Affected Vendor

Affected Software

f-prot antivirus, scanning engine
Vulnerable Versions:
3.11b, 3.12, 3.12a, 3.12b, 3.12c, 3.12d, 3.13, 3.13a, 3.14, 3.14a, 3.14b, 3.14c, 3.14d, 3.14e, 3.15, 3.15a, 3.15b, 3.16, 3.16a, 3.16b, 3.16c, 3.16d, 3.16e, 3.16f, 4.6.6, 6.0.5, 6.0.5.1, 6.0.6, 6.0.6.1, 6.0.6.3, 6.0.6.4, 6.0.7, 6.0.7.1, 6.0.8, 0

Timeline

Official Publish: July 21st, 2008
Last Modified: August 7th, 2024
Added to House: July 18th, 2026

CVSS Vectors

Weaknesses (CWE)

No CWE data available

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.