cbcvebase.
CVE-2008-1437
published 2008-05-13

CVE-2008-1437: Unspecified vulnerability in Microsoft Malware Protection Engine (mpengine.dll) 1.1.3520.0 and 0.1.13.192, as used in multiple Microsoft products, allows…

PriorityP422medium5CVSS 2.0
AVNACLAuNCNINAP
EPSS
12.94%
95.9th percentile
Unspecified vulnerability in Microsoft Malware Protection Engine (mpengine.dll) 1.1.3520.0 and 0.1.13.192, as used in multiple Microsoft products, allows context-dependent attackers to cause a denial of service (engine hang and restart) via a crafted file, a different vulnerability than CVE-2008-1438.

Affected

3 ranges
VendorProductVersion rangeFixed in
microsoftdiagnostics_and_recovery_toolkit
microsoftmalware_protection_engine
microsoftmalware_protection_engine
Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.