CVE-2008-0308
Symantec Decomposer, as used in certain Symantec antivirus products including Symantec Scan Engine 5.1.2 and other versions before 5.1.6.31, allows remote attackers to cause a denial of service (memory consumption) via a malformed RAR file to the Internet Content Adaptation Protocol (ICAP) port (1344/tcp).
- EPSS
- 2.6% chance of exploitation in the next 30 days; higher than 85% of CVEs (scores of 2026-10-31)
- CWE
- CWE-399
- Published
- Modified
- Record from
- the NVD, synced
Affected
- symantec:scan_engine
- symantec:symantec_antivirus_clearswift
- symantec:symantec_antivirus_filtering_domino_mpe
- symantec:symantec_antivirus_messaging
- symantec:symantec_antivirus_microsoft_sharepoint
- symantec:symantec_antivirus_ms_isa
- symantec:symantec_antivirus_network_attached_storage
- symantec:symantec_antivirus_scan_engine
- symantec:symantec_antivirus_scan_engine_caching
- symantec:symantec_mail_security_exchange