>> Symantec Products Decomposer Buffer Overflow and DoS Issues
Title : Symantec Products Decomposer Buffer Overflow and DoS Issues VUPEN ID : VUPEN/ADV-2008-0680 CVE ID : CVE-2008-0308 - CVE-2008-0309
Rated as : Critical
Remotely Exploitable : Yes Locally Exploitable : Yes Release Date : 2008-02-27
Technical Description
Multiple vulnerabilities have been identified in various Symantec products, which could be exploited by attackers or malware to cause a denial of service or take complete contol of an affected system. These issues are caused by infinite loop and buffer overflow errors in the Decomposer engine when processing malformed RAR archives, which could be exploited to cause a vulnerable application to crash or consume large amounts of memory, or execute arbitrary code.
