Vulnerabilities > CVE-2008-3243 - Unspecified vulnerability in F-Prot Antivirus and Scanning Engine

CVSS 0.0 - NONE

Attack vector

UNKNOWN

Attack complexity

UNKNOWN

Privileges required

UNKNOWN

Confidentiality impact

UNKNOWN

Integrity impact

UNKNOWN

Availability impact

UNKNOWN

f-prot

nessus

NVD

Published: 2008-07-21

Updated: 2024-11-21

Summary

Multiple unspecified vulnerabilities in the scanning engine before 4.4.4 in F-Prot Antivirus before 6.0.9.0 allow remote attackers to cause a denial of service via (1) a crafted UPX-compressed file, which triggers an engine crash; (2) a crafted Microsoft Office file, which triggers an infinite loop; or (3) an ASPack-compressed file, which triggers an engine crash.

Vulnerable Configurations

Part	Description	Count
Application	F-Prot F Prot F Prot Antivirus 3.11B F Prot F Prot Antivirus 3.16B F Prot F Prot Antivirus 3.14 F Prot F Prot Antivirus 3.13A F Prot F Prot Antivirus 4.6.6 F Prot F Prot Antivirus 6.0.5.1 F Prot F Prot Antivirus 3.16C F Prot F Prot Antivirus 3.13 F Prot F Prot Antivirus 3.15 F Prot F Prot Antivirus 3.16E F Prot F Prot Antivirus 3.12C F Prot F Prot Antivirus 6.0.7.1 F Prot F Prot Antivirus 6.0.6.3 F Prot F Prot Antivirus 3.15A F Prot F Prot Antivirus 3.12A F Prot F Prot Antivirus 3.12B F Prot F Prot Antivirus 6.0.5 F Prot F Prot Antivirus 6.0.6 F Prot F Prot Antivirus 3.16 F Prot F Prot Antivirus 3.14A F Prot F Prot Antivirus 6.0.6.4 F Prot F Prot Antivirus 3.14C F Prot F Prot Antivirus 6.0.8 F Prot F Prot Antivirus 3.16D F Prot F Prot Antivirus 3.14D F Prot F Prot Antivirus 3.16F F Prot F Prot Antivirus 3.12 F Prot F Prot Antivirus 6.0.7 F Prot F Prot Antivirus 6.0.6.1 F Prot F Prot Antivirus 3.15B F Prot F Prot Antivirus 3.14E F Prot F Prot Antivirus 3.14B F Prot F Prot Antivirus 3.12D F Prot F Prot Antivirus 3.16A F Prot Scanning Engine *	35

Nessus

NASL family	Windows
NASL id	FPROT_MULTIPLE_VULNS.NASL
description	The version of F-PROT Anti-Virus installed on the remote Windows host contains flaws in the way it handles CHM, UPX-compressed, ASPack-compressed and certain Microsoft office files. - A malformed CHM file containing
last seen	2020-06-01
modified	2020-06-02
plugin id	33549
published	2008-07-21
reporter	This script is Copyright (C) 2008-2018 Tenable Network Security, Inc.
source	https://www.tenable.com/plugins/nessus/33549
title	F-PROT Antivirus Engine < 4.4.4 Multiple File Handling DoS Vulnerabilities

NASL family	Gentoo Local Security Checks
NASL id	GENTOO_GLSA-200904-14.NASL
description	The remote host is affected by the vulnerability described in GLSA-200904-14 (F-PROT Antivirus: Multiple Denial of Service vulnerabilities) The following vulnerabilities were found: Multiple errors when processing UPX, ASPack or Microsoft Office files (CVE-2008-3243). Infinite Sergio Alvarez of n.runs AG reported an invalid memory access when processing a CHM file with a large nb_dir value (CVE-2008-3244). Jonathan Brossard from iViZ Techno Solutions reported that F-PROT Antivirus does not correctly process ELF binaries with corrupted headers (CVE-2008-5747). Impact : A remote attacker could entice a user or automated system to scan a specially crafted file, leading to a crash or infinite loop. Workaround : There is no known workaround at this time.
last seen	2020-06-01
modified	2020-06-02
plugin id	36158
published	2009-04-15
reporter	This script is Copyright (C) 2009-2019 Tenable Network Security, Inc.
source	https://www.tenable.com/plugins/nessus/36158
title	GLSA-200904-14 : F-PROT Antivirus: Multiple Denial of Service vulnerabilities

Summary

Vulnerable Configurations

Nessus

References