What’s Vulnerable › Vulnerabilities

CVE-2008-3243

• Severity: medium (CVSS 4.3 v2.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 2.1% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2008-07-21 · updated 2026-06-16
• Weakness: CWE-20

Description

Multiple unspecified vulnerabilities in the scanning engine before 4.4.4 in F-Prot Antivirus before 6.0.9.0 allow remote attackers to cause a denial of service via (1) a crafted UPX-compressed file, which triggers an engine crash; (2) a crafted Microsoft Office file, which triggers an infinite loop; or (3) an ASPack-compressed file, which triggers an engine crash.

Affected products

• F-Prot Antivirus: 3.11b, 3.12, 3.12a, 3.12b, 3.12c, 3.12d (+28)
• F-Prot Scanning Engine: through 4.3.2

References

• http://secunia.com/advisories/31118
• http://www.f-prot.com/download/ReleaseNotesWindows.txt
• http://www.securityfocus.com/bid/30258
• https://exchange.xforce.ibmcloud.com/vulnerabilities/43868
• https://exchange.xforce.ibmcloud.com/vulnerabilities/43869
• https://exchange.xforce.ibmcloud.com/vulnerabilities/43870
• http://secunia.com/advisories/31118
• http://www.f-prot.com/download/ReleaseNotesWindows.txt
• http://www.securityfocus.com/bid/30258
• https://exchange.xforce.ibmcloud.com/vulnerabilities/43868
• https://exchange.xforce.ibmcloud.com/vulnerabilities/43869
• https://exchange.xforce.ibmcloud.com/vulnerabilities/43870

Get alerted when CVE-2008-3243 or the next vulnerability affects your stack