Public exploit available
Public proof-of-concept or exploit code exists (ExploitDB / Metasploit / Nuclei).

CVE-2008-3447 — Infinite Loop in Antivirus

CWE-3994 documents4 sources
Severity
5.0MEDIUMNVD
EPSS
11.3%
top 6.44%
CISA KEV
Not in KEV
Exploit
PoC available
Public exploit / PoC exists
Affected products
2
F-prot AntivirusF-prot Scanning Engine
Timeline
PublishedAug 4
Latest updateMay 2

Description

The scanning engine in F-Prot Antivirus 6.2.1 4252 allows remote attackers to cause a denial of service (infinite loop) via a malformed ZIP archive, probably related to invalid offsets.

CVSS vector

AV:N/AC:L/C:N/I:N/A:PExploitability: 10.0 | Impact: 2.9

Affected Packages2 packages

▶NVDf-prot/f-prot_antivirus6.2.1.4252

🔴Vulnerability Details

2
GHSA
GHSA-w28p-3vfp-xgqp: The scanning engine in F-Prot Antivirus 6↗2022-05-02
▶
CVEList
CVE-2008-3447: The scanning engine in F-Prot Antivirus 6↗2008-08-04
▶

💥Exploits & PoCs

1
Exploit-DB
F-PROT AntiVirus 6.2.1.4252 - Malformed Archive Infinite Loop Denial of Service↗2008-07-31
▶
CVE-2008-3447 — Infinite Loop in F-prot Antivirus | cvebase