CVE-2008-3244: F-Prot Antivirus

Medium severity, CVSS 4.3. EPSS: 2.2% chance of exploitation in the next 30 days.

The scanning engine before 4.4.4 in F-Prot Antivirus before 6.0.9.0 allows remote attackers to cause a denial of service (engine crash) via a CHM file with a large nb_dir value that triggers an out-of-bounds read.

Affected products

• F-Prot F-Prot Antivirus: version 3.11b only; version 3.12 only; version 3.12a only; version 3.12b only; version 3.12c only; version 3.12d only; …
• F-Prot Scanning Engine: up to and including 4.3.2

Published 2008-07-21. Last modified 2026-06-16.