CVE-2008-3373

Published: Jul 30, 2008Modified: Apr 23, 2026

5.0

Vector

AV:N/AC:L/Au:N/C:N/I:N/A:P

Exploitability: 10.0 / Impact: 2.9

Source: NVD

Description

The files parsing engine in Grisoft AVG Anti-Virus before 8.0.156 allows remote attackers to cause a denial of service (engine crash) via a crafted UPX compressed file, which triggers a divide-by-zero error.

Affected (3)

Products: Grisoft: Avg Antivirus

Grisoft

1 product

Avg Antivirus

Configuration A

3 vulnerable

Vulnerable Software	Affected Versions
Grisoft Avg Antivirus	Version 7.1
Grisoft Avg Antivirus	Version 7.5
Grisoft Avg Antivirus	Version 8.0

Related CWEs

CWE-189

References (16)

http://secunia.com/advisories/31290

Source: cve@mitre.org

Vendor Advisory

http://www.grisoft.com/ww.94247

Source: cve@mitre.org

http://www.nruns.com/advisories/%5Bn.runs-SA-2008%20004%5D%20-%20AVG%20Antivirus%20UPX%20parsing%20Divide%20by%20Zero%20Advisory.txt

Source: cve@mitre.org

http://www.securityfocus.com/archive/1/494867/100/0/threaded

Source: cve@mitre.org

http://www.securityfocus.com/bid/30417

Source: cve@mitre.org

http://www.securitytracker.com/id?1020570

Source: cve@mitre.org

http://www.vupen.com/english/advisories/2008/2225/references

Source: cve@mitre.org

https://exchange.xforce.ibmcloud.com/vulnerabilities/44057

Source: cve@mitre.org

http://secunia.com/advisories/31290