VDB
CVE-2008-3447
CVE-2008-3447
PUBLISHED
CVSS 5 MEDIUM
The scanning engine in F-Prot Antivirus 6.2.1 4252 allows remote attackers to cause a denial of service (infinite loop) via a malformed ZIP archive, probably related to invalid offsets.
EPSS 7.87% · 94.6th percentile
Risk Scores
CVSS 2.0
5
EPSS Score
7.87%
94.6th percentile
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| f-prot | scanning_engine | 4.4.4.56 |
| n/a | n/a | n/a |
| f-prot | f-prot_antivirus | 6.2.1.4252 |
Timeline
- Jul 31, 2008 PoC Published
- Aug 4, 2008 CVE Published
- Feb 4, 2022 EPSS Score
- Mar 29, 2022 EPSS Score
- Jul 13, 2022 EPSS Score
- Sep 4, 2022 EPSS Score
- Dec 19, 2022 EPSS Score
- Feb 10, 2023 EPSS Score
- Mar 7, 2023 EPSS Score
- May 27, 2023 EPSS Score
- Jul 19, 2023 EPSS Score
- Nov 1, 2023 EPSS Score
References
- 1020612 vdb
- 6174 exploit
- ADV-2008-2283 vdb
- 30461 vdb
- 20080731 F-PROT antivirus 6.2.1.4252 infinite loop denial of service via malformed archive mailing-list
- 31313 third-party-advisory
- fprotantivirus-infiniteloop-dos(44134) vdb
- https://nvd.nist.gov/vuln/detail/CVE-2008-3447 advisory