Description
Unspecified vulnerability in Microsoft Malware Protection Engine (mpengine.dll) 1.1.3520.0 and 0.1.13.192, as used in multiple Microsoft products, allows context-dependent attackers to cause a denial of service (disk space exhaustion) via a file with "crafted data structures" that trigger the creation of large temporary files, a different vulnerability than CVE-2008-1437.
References
- 30172 third-party-advisory
- 29073 vdb-entry
- 1020016 vdb-entry
- oval:org.mitre.oval:def:14375 vdb-entry signature
- ADV-2008-1506 vdb-entry
- SSRT080071 vendor-advisory
- TA08-134A third-party-advisory
- MS08-029 vendor-advisory