← Database

CVE-2008-1438

MEDIUM CVSS: 5.0 Published: 2008-05-13 Modified: 2026-06-16

Description

Unspecified vulnerability in Microsoft Malware Protection Engine (mpengine.dll) 1.1.3520.0 and 0.1.13.192, as used in multiple Microsoft products, allows context-dependent attackers to cause a denial of service (disk space exhaustion) via a file with "crafted data structures" that trigger the creation of large temporary files, a different vulnerability than CVE-2008-1437.

Affected Platforms

Microsoft Forefront Security For SharepointMicrosoft Malware Protection EngineMicrosoft Forefront Client SecurityMicrosoft Forefront Security For Exchange ServerMicrosoft Antigen For ExchangeMicrosoft Windows DefenderMicrosoft Diagnostics And Recovery ToolkitMicrosoft Windows Live OnecareMicrosoft Antigen For Smtp Gateway

Weakness Type

CWE-399

References