Home Page | Skip to Navigation | Skip to Content | Skip to Search | Skip to Footer

Workaround for Microsoft Malware Protection Engine Denial of Service Vulnerability (MS08-029)

 

Check Point Reference: SBP-2008-06
Date Published:
Severity:
Last Updated:
Source: Microsoft Security Bulletin MS08-029
Industry Reference(s): CVE-2008-1437
Protection Provided by: VPN-1
  • NGX R65
  • NGX R62
  • NGX R61
  • NGX R60
VSX
  • NGX R65
Who is Vulnerable?
Windows Live OneCare
Microsoft Antigen for Exchange 9.x
Microsoft Antigen for SMTP Gateway 9.x
Microsoft Windows Defender for Windows XP
Microsoft Windows Defender in Windows Vista
Microsoft Forefront Client Security
Microsoft Forefront Edge Server
Microsoft Forefront Security for Exchange Server
Microsoft Forefront Security for SharePoint
Standalone System Sweeper with MDOP
Vulnerability Description
A denial of service vulnerability has been reported in Microsoft Malware Protection Engine. The Microsoft Malware Protection Engine provides the scanning, detection and cleaning capabilities for the following antivirus and antispyware clients: Windows Live OneCare, Microsoft Forefront Security, Microsoft Antigen, and Windows Defender. A remote attacker can exploit this issue via a specially crafted file. Successful exploitation of this vulnerability may lead to a denial of service condition, causing the computer to stop responding and automatically restart.