CVE:CVE-2008-0308
CNNVD:CNNVD-200802-493
Symantec的Decomposer引擎用于在扫描恶意内容时解析一些类型的文档内容。
Decomposer引擎处理畸形格式的RAR文档时存在拒绝服务漏洞。如果Decomposer引擎扫描到了畸形的RAR文件的话，就可能耗尽大量内存，导致整个系统拒绝服务。
solution:Upgrade symantec scan_engine to a higher version than 5.1.4.24,and avoid the version (,5.1.4.24]; Upgrade symantec symantec_antivirus_clearswift to a higher version than 4.3.16.39,and avoid the version (,4.3.16.39]; Upgrade symantec symantec_antivirus_filtering_domino_mpe to a higher version than 3.0.12,and avoid the version (,3.0.12]; Upgrade symantec symantec_antivirus_messaging to a higher version than 4.3.16.39,and avoid the version (,4.3.16.39]; Upgrade symantec symantec_antivirus_microsoft_sharepoint to a higher version than 4.3.16.39,and avoid the version (,4.3.16.39]; Upgrade symantec symantec_antivirus_ms_isa to a higher version than 4.3.16.39,and avoid the version (,4.3.16.39]; Upgrade symantec symantec_antivirus_network_attached_storage to a higher version than 4.3.16.39,and avoid the version (,4.3.16.39]; Upgrade symantec symantec_antivirus_scan_engine to a higher version than 4.3.16.39,and avoid the version (,4.3.16.39]; Upgrade symantec symantec_antivirus_scan_engine_caching to a higher version than 4.3.16.39,and avoid the version (,4.3.16.39]; Upgrade symantec symantec_mail_security_exchange to a higher version than 4.6.5.12,5.0.4.363,and avoid the version (,4.6.5.12],(,5.0.4.363]