CVE-2008-3243: F-Prot Antivirus

Medium severity, CVSS 4.3. EPSS: 2.1% chance of exploitation in the next 30 days.

Multiple unspecified vulnerabilities in the scanning engine before 4.4.4 in F-Prot Antivirus before 6.0.9.0 allow remote attackers to cause a denial of service via (1) a crafted UPX-compressed file, which triggers an engine crash; (2) a crafted Microsoft Office file, which triggers an infinite loop; or (3) an ASPack-compressed file, which triggers an engine crash.

Affected products

• F-Prot F-Prot Antivirus: version 3.11b only; version 3.12 only; version 3.12a only; version 3.12b only; version 3.12c only; version 3.12d only; …
• F-Prot Scanning Engine: up to and including 4.3.2

Published 2008-07-21. Last modified 2026-06-16.