CVE-2008-1279

Acronis True Image Group Server 1.5.19.191 and earlier, included in Acronis True Image Enterprise Server 9.5.0.8072 and the other True Image packages, allows remote attackers to cause a denial of service (crash) via a packet with an invalid length field, which causes an out-of-bounds read.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTNIST
5 UNKNOWN
NETWORK
LOW
AV:N/AC:L/Au:N/C:N/I:N/A:P
mitreCNA
---
---
CVEADP
---
---
Base Score
CVSS 3.x
EPSS Score
Percentile: 77%
VendorProductVersion
acronistrue_image
𝑥
≤ 1.5.19.191
acronistrue_image
𝑥
≤ 9.5.0.8072
𝑥
= Vulnerable software versions
Common Weakness Enumeration
References
http://aluigi.altervista.org/adv/acrogroup-adv.txt
http://secunia.com/advisories/29306
http://www.securityfocus.com/archive/1/489353/100/0/threaded
http://www.securityfocus.com/bid/28169
http://www.vupen.com/english/advisories/2008/0813/references
https://exchange.xforce.ibmcloud.com/vulnerabilities/41071
http://aluigi.altervista.org/adv/acrogroup-adv.txt
http://secunia.com/advisories/29306
http://www.securityfocus.com/archive/1/489353/100/0/threaded
http://www.securityfocus.com/bid/28169
http://www.vupen.com/english/advisories/2008/0813/references
https://exchange.xforce.ibmcloud.com/vulnerabilities/41071