CVE-2008-1438
published 2008-05-13CVE-2008-1438: Unspecified vulnerability in Microsoft Malware Protection Engine (mpengine.dll) 1.1.3520.0 and 0.1.13.192, as used in multiple Microsoft products, allows…
medium5CVSS 3.1
AVNACLAuNCNINAP
Unspecified vulnerability in Microsoft Malware Protection Engine (mpengine.dll) 1.1.3520.0 and 0.1.13.192, as used in multiple Microsoft products, allows context-dependent attackers to cause a denial of service (disk space exhaustion) via a file with "crafted data structures" that trigger the creation of large temporary files, a different vulnerability than CVE-2008-1437.
Affected
3 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| microsoft | diagnostics_and_recovery_toolkit | — | — |
| microsoft | malware_protection_engine | — | — |
| microsoft | malware_protection_engine | — | — |