CVE-2008-1280: Acronis True Image

Medium severity, CVSS 5.0. EPSS: 2.5% chance of exploitation in the next 30 days.

Acronis True Image Windows Agent 1.0.0.54 and earlier, included in Acronis True Image Enterprise Server 9.5.0.8072 and the other True Image packages, allows remote attackers to cause a denial of service (crash) via a malformed packet to port 9876, which triggers a NULL pointer dereference.

Affected products

• Acronis True Image: up to and including 9.5.0.8072
• Acronis True Image Windows Agent: up to and including 1.0.0.54

Published 2008-03-10. Last modified 2026-06-16.