CVE-2008-1438: Microsoft Antigen For Exchange

Medium severity, CVSS 5.0. EPSS: 12.9% chance of exploitation in the next 30 days.

Unspecified vulnerability in Microsoft Malware Protection Engine (mpengine.dll) 1.1.3520.0 and 0.1.13.192, as used in multiple Microsoft products, allows context-dependent attackers to cause a denial of service (disk space exhaustion) via a file with "crafted data structures" that trigger the creation of large temporary files, a different vulnerability than CVE-2008-1437.

Affected products

• Microsoft Antigen For Exchange: any version
• Microsoft Antigen For Smtp Gateway: any version
• Microsoft Diagnostics And Recovery Toolkit: version 6.0 only
• Microsoft Forefront Client Security: any version
• Microsoft Forefront Security For Exchange Server: any version
• Microsoft Forefront Security For SharePoint: any version
• Microsoft Malware Protection Engine: version 0.1.13.192 only; version 1.1.3520.0 only
• Microsoft Windows Defender: any version
• Microsoft Windows Live Onecare: any version

Published 2008-05-13. Last modified 2026-06-16.