CVE-2008-1438
Unspecified vulnerability in Microsoft Malware Protection Engine (mpengine.dll) 1.1.3520.0 and 0.1.13.192, as used in multiple Microsoft products, allows context-dependent attackers to cause a denial of service (disk space exhaustion) via a file with "crafted data structures" that trigger the creation of large temporary files, a different vulnerability than CVE-2008-1437.
Published:May 13, 2008
Last Modified:Apr 23, 2026
EPS:May 13, 2008
EPSS Score:0.43712
CVSS Score:5
Affected Products
Vendor
Product
Action
Vendor
Microsoft
Product
Antigen For Exchange
Microsoft
Antigen For Exchange
Vendor
Microsoft
Product
Antigen For Smtp Gateway
Microsoft
Antigen For Smtp Gateway
Vendor
Microsoft
Product
Diagnostics And Recovery Toolkit
Microsoft
Diagnostics And Recovery Toolkit
Vendor
Microsoft
Product
Forefront Client Security
Microsoft
Forefront Client Security
Vendor
Microsoft
Product
Forefront Security For Exchange Server
Microsoft
Forefront Security For Exchange Server
Vendor
Microsoft
Product
Forefront Security For Sharepoint
Microsoft
Forefront Security For Sharepoint
Vendor
Microsoft
Product
Malware Protection Engine
Microsoft
Malware Protection Engine
Vendor
Microsoft
Product
Windows Defender
Microsoft
Windows Defender
Vendor
Microsoft
Product
Windows Live Onecare
Microsoft
Windows Live Onecare
Exploits
No exploit reference
Common Weakness Enumeration
No CWE recorded yet
Common Attack Pattern Enumeration and Classification (CAPEC)
No CAPEC recorded yet
References
Common Vulnerability Scoring System
Attack Vector
Network
Adjacent
Local
Physical
Privileges Required
None
Low
High
User Interaction
None
Required
Scope
Unchanged
Changed
Confidentiality
None
Low
High
Integrity
None
Low
High
Availability
None
Low
High
