| ID |
CVE-2008-1437
|
| Summary |
Unspecified vulnerability in Microsoft Malware Protection Engine (mpengine.dll) 1.1.3520.0 and 0.1.13.192, as used in multiple Microsoft products, allows context-dependent attackers to cause a denial of service (engine hang and restart) via a crafted file, a different vulnerability than CVE-2008-1438. |
| References |
|
| Vulnerable Configurations |
-
cpe:2.3:a:microsoft:antigen_for_exchange:*:*:*:*:*:*:*:*
cpe:2.3:a:microsoft:antigen_for_exchange:*:*:*:*:*:*:*:*
-
cpe:2.3:a:microsoft:antigen_for_smtp_gateway:*:*:*:*:*:*:*:*
cpe:2.3:a:microsoft:antigen_for_smtp_gateway:*:*:*:*:*:*:*:*
-
cpe:2.3:a:microsoft:diagnostics_and_recovery_toolkit:6.0:*:*:*:*:*:*:*
cpe:2.3:a:microsoft:diagnostics_and_recovery_toolkit:6.0:*:*:*:*:*:*:*
-
cpe:2.3:a:microsoft:forefront_client_security:*:*:*:*:*:*:*:*
cpe:2.3:a:microsoft:forefront_client_security:*:*:*:*:*:*:*:*
-
cpe:2.3:a:microsoft:forefront_security_for_exchange_server:*:*:*:*:*:*:*:*
cpe:2.3:a:microsoft:forefront_security_for_exchange_server:*:*:*:*:*:*:*:*
-
cpe:2.3:a:microsoft:forefront_security_for_sharepoint:*:*:*:*:*:*:*:*
cpe:2.3:a:microsoft:forefront_security_for_sharepoint:*:*:*:*:*:*:*:*
-
cpe:2.3:a:microsoft:malware_protection_engine:0.1.13.192:*:*:*:*:*:*:*
cpe:2.3:a:microsoft:malware_protection_engine:0.1.13.192:*:*:*:*:*:*:*
-
cpe:2.3:a:microsoft:malware_protection_engine:1.1.3520.0:*:*:*:*:*:*:*
cpe:2.3:a:microsoft:malware_protection_engine:1.1.3520.0:*:*:*:*:*:*:*
-
cpe:2.3:a:microsoft:windows_defender:*:*:*:*:*:*:*:*
cpe:2.3:a:microsoft:windows_defender:*:*:*:*:*:*:*:*
-
cpe:2.3:a:microsoft:windows_live_onecare:*:*:*:*:*:*:*:*
cpe:2.3:a:microsoft:windows_live_onecare:*:*:*:*:*:*:*:*
|
| CVSS |
| Base: | 5.0 (as of 12-10-2018 - 21:45) |
| Impact: | |
| Exploitability: | |
|
| CWE |
CWE-399 |
| CAPEC |
|
| Access |
| Vector | Complexity | Authentication |
| NETWORK |
LOW |
NONE |
|
| Impact |
| Confidentiality | Integrity | Availability |
| NONE |
NONE |
PARTIAL |
|
| cvss-vector
via4
|
AV:N/AC:L/Au:N/C:N/I:N/A:P
|
| oval
via4
|
| accepted | 2012-01-16T04:00:46.641-05:00 | | class | vulnerability | | contributors | | name | SecPod Team | | organization | SecPod Technologies |
| | definition_extensions | | comment | Microsoft Windows Live OneCare is installed | | oval | oval:org.mitre.oval:def:14185 |
| comment | Microsoft Windows Defender is installed | | oval | oval:org.mitre.oval:def:14263 |
| comment | Microsoft Forefront Security for SharePoint is installed | | oval | oval:org.mitre.oval:def:14529 |
| comment | Microsoft Forefront Security for Exchange Server is installed | | oval | oval:org.mitre.oval:def:14468 |
| comment | Microsoft Antigen for Exchange is installed | | oval | oval:org.mitre.oval:def:14520 |
| comment | Microsoft Antigen for SMTP Gateway is installed | | oval | oval:org.mitre.oval:def:14251 |
| | description | Unspecified vulnerability in Microsoft Malware Protection Engine (mpengine.dll) 1.1.3520.0 and 0.1.13.192, as used in multiple Microsoft products, allows context-dependent attackers to cause a denial of service (engine hang and restart) via a crafted file, a different vulnerability than CVE-2008-1438. | | family | windows | | id | oval:org.mitre.oval:def:13981 | | status | accepted | | submitted | 2011-12-09T18:23:43 | | title | Microsoft Malware Protection Engine Vulnerability-I | | version | 10 |
|
| refmap
via4
|
| bid | 29060 | | cert | TA08-134A | | hp | | | sectrack | 1020016 | | secunia | 30172 | | vupen | ADV-2008-1506 |
|
| Last major update |
12-10-2018 - 21:45 |
| Published |
13-05-2008 - 22:20 |
| Last modified |
12-10-2018 - 21:45 |
