What’s Vulnerable › Vulnerabilities

CVE-2008-3244

• Severity: medium (CVSS 4.3 v2.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 2.2% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2008-07-21 · updated 2026-06-16
• Weakness: CWE-20

Description

The scanning engine before 4.4.4 in F-Prot Antivirus before 6.0.9.0 allows remote attackers to cause a denial of service (engine crash) via a CHM file with a large nb_dir value that triggers an out-of-bounds read.

Affected products

• F-Prot Antivirus: 3.11b, 3.12, 3.12a, 3.12b, 3.12c, 3.12d (+28)
• F-Prot Scanning Engine: through 4.3.2

References

• http://secunia.com/advisories/31118
• http://www.f-prot.com/download/ReleaseNotesWindows.txt
• http://www.nruns.com/security_advisory_fprot_out-of-bound_memory_access_DoS.php
• http://www.securityfocus.com/bid/30253
• http://www.securitytracker.com/id?1020507
• http://www.vupen.com/english/advisories/2008/2124/references
• https://exchange.xforce.ibmcloud.com/vulnerabilities/43835
• http://secunia.com/advisories/31118
• http://www.f-prot.com/download/ReleaseNotesWindows.txt
• http://www.nruns.com/security_advisory_fprot_out-of-bound_memory_access_DoS.php
• http://www.securityfocus.com/bid/30253
• http://www.securitytracker.com/id?1020507

Get alerted when CVE-2008-3244 or the next vulnerability affects your stack