Symantec Antivirus Scan Engine vulnerabilities

2 CVEs affecting Symantec Antivirus Scan Engine, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2008-0309, published 2008-02-28.

More from Symantec.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2008-0309, published 2008-02-28. Medium severity, CVSS 6.8. EPSS: 3.7% chance of exploitation in the next 30 days. Stack-based buffer overflow in Symantec Decomposer, as used in certain Symantec antivirus products including Symantec Scan Engine 5.1.2 and other versions before 5.1.6.31, allows remote attackers to…
• CVE-2008-0308, published 2008-02-28. High severity, CVSS 7.1. EPSS: 2.6% chance of exploitation in the next 30 days. Symantec Decomposer, as used in certain Symantec antivirus products including Symantec Scan Engine 5.1.2 and other versions before 5.1.6.31, allows remote attackers to cause a denial of service…