exploits , vulnerabilities , articles , Symantec Decomposer RAR File Remote Buffer Overflow Vulnerability

Title	Symantec Decomposer RAR File Remote Buffer Overflow Vulnerability
Published	2008-02-26-12:00AM
Updated	2008-02-27-04:42PM
Class	Boundary Condition Error
CVE	CVE-2008-0309
Remote	Yes
Local	No
Credit	iDefense is credited with discovering this issue.
Vulnerable	Symantec Scan Engine 5.1.4.24 Symantec Mail Security for Microsoft Exchange 5.0 Symantec Mail Security for Microsoft Exchange 4.6.3 Symantec Mail Security for Microsoft Exchange 4.6.3 Symantec Mail Security for Microsoft Exchange 4.6 build 97 Symantec Mail Security for Microsoft Exchange 4.6 build 97 Symantec Mail Security for Microsoft Exchange 4.6 build 4.6.1.107 Symantec Mail Security for Microsoft Exchange 4.5 build 719 Symantec Mail Security for Microsoft Exchange 4.5 build 4.5.4.743 Symantec Mail Security for Microsoft Exchange 4.5 build 743 Symantec Mail Security for Microsoft Exchange 4.5 build 741 Symantec Mail Security for Microsoft Exchange 4.5 build 736 Symantec Mail Security for Microsoft Exchange 4.5 Symantec Mail Security for Microsoft Exchange 4.1 build 459 Symantec Mail Security for Microsoft Exchange 4.1 build 458 Symantec Mail Security for Microsoft Exchange 4.1 461 Symantec Mail Security for Microsoft Exchange 4.0 build 743 Symantec Mail Security for Microsoft Exchange 4.0 build 741 Symantec Mail Security for Microsoft Exchange 4.0 build 736 Symantec Mail Security for Microsoft Exchange 4.0 build 465 Symantec Mail Security for Microsoft Exchange 4.0 build 463 Symantec Mail Security for Microsoft Exchange 4.0 build 456 Symantec Mail Security for Microsoft Exchange 4.0 build 465 Symantec Mail Security for Microsoft Exchange 4.0 build 463 Symantec Mail Security for Microsoft Exchange 4.0 build 456 Symantec Mail Security for Microsoft Exchange 4.0 Symantec Mail Security for Microsoft Exchange 5.0.7.373 Symantec Mail Security for Microsoft Exchange 5.0.4.363 Symantec Mail Security for Microsoft Exchange 5.0.0.204 Symantec AntiVirus/Filtering for Domino MPE 0 Symantec AntiVirus Scan Engine for Network Attached Storage 4.3.16.39 Symantec AntiVirus Scan Engine for Microsoft SharePoint 4.3.17 Symantec AntiVirus Scan Engine for Microsoft SharePoint 4.3.12 Symantec AntiVirus Scan Engine for Microsoft SharePoint 4.3 Symantec AntiVirus Scan Engine for Microsoft SharePoint 4.3.16.39 Symantec AntiVirus Scan Engine for Messaging 4.3.12 Symantec AntiVirus Scan Engine for Messaging 4.3 Symantec AntiVirus Scan Engine for Messaging 4.3.16.39 Symantec AntiVirus Scan Engine for ISA 4.3.12 Symantec AntiVirus Scan Engine for ISA 4.3 build 4.3.3 Symantec AntiVirus Scan Engine for ISA 4.3 Symantec AntiVirus Scan Engine for ISA 4.0 Symantec AntiVirus Scan Engine for ISA 4.3.16.39 Symantec AntiVirus Scan Engine for Clearswift 4.3.12 Symantec AntiVirus Scan Engine for Clearswift 4.3 Symantec AntiVirus Scan Engine for Clearswift 4.0 Symantec AntiVirus Scan Engine for Clearswift 4.3.16.39 Symantec AntiVirus Scan Engine for Caching 4.3.12 Symantec AntiVirus Scan Engine for Caching 4.3 Symantec AntiVirus Scan Engine for Caching 4.3.16.39 Symantec AntiVirus Scan Engine 4.3.12 Symantec AntiVirus Scan Engine 4.3 build 4.3.8.29 Symantec AntiVirus Scan Engine 4.3 build 4.3.7.27 Symantec AntiVirus Scan Engine 4.3 build 4.3.3 Symantec AntiVirus Scan Engine 4.3 Symantec AntiVirus Scan Engine 4.1.8 Symantec AntiVirus Scan Engine 4.1 Symantec AntiVirus Scan Engine 4.0 Symantec AntiVirus for Network Attached Storage
Not Vulnerable	Symantec Scan Engine 5.1.6.31 Symantec Mail Security for Microsoft Exchange 5.0.6.368 Symantec Mail Security for Microsoft Exchange 4.6.8.120 Symantec AntiVirus/Filtering for Domino MPE 3.2.2 Symantec AntiVirus Scan Engine for Network Attached Storage 4.3.18.43 Symantec AntiVirus Scan Engine for Microsoft SharePoint 4.3.18.43 Symantec AntiVirus Scan Engine for Messaging 4.3.18.43 Symantec AntiVirus Scan Engine for ISA 4.3.18.43 Symantec AntiVirus Scan Engine for Clearswift 4.3.18.43 Symantec AntiVirus Scan Engine for Caching 4.3.18.43 Symantec AntiVirus Scan Engine 4.3.18.43
Code	Currently we are not aware of any working exploits for this issue. If you feel we are in error or if you are aware of more recent information, please mail us at: content@securitydot.net.
TXT

Vulnerabilities - newest 10 RSS | More

2008-12-02 xrdp Multiple Buffer Overflow Vulnerabilities
2008-12-02 FFmpeg Multiple Denial of Service Vulnerabilities
2008-12-01 SystemImager Flamethrower Insecure Temporary File Creation Vulnerabilities
2008-12-01 Rumpus FTP Server Command Argument Remote Buffer Overflow Vulnerability
2008-12-01 Rumpus FTP Server HTTP Command Remote Denial of Service Vulnerability
2008-11-29 Multiple ActiveWebSoftwares Products Login Parameters SQL Injection Vulnerabilities
2008-11-29 Venalsur Booking Centre Multiple Cross-Site Scripting Vulnerabilities
2008-11-28 ReVou Login SQL Injection Vulnerability
2008-11-28 Web Calendar System SQL Injection and Cross Site Scripting Vulnerabilities
2008-11-28 SailPlanner Login SQL Injection Vulnerability