CVE-2008-1437: Medium severity microsoft forefront client security vulnerability

Published May 13, 2008
·
Updated

Unspecified vulnerability in Microsoft Malware Protection Engine (mpengine.dll) 1.1.3520.0 and 0.1.13.192, as used in multiple Microsoft products, allows context-dependent attackers to cause a denial of service (engine hang and restart) via a crafted file, a different vulnerability than CVE-2008-1438.

Affected Software

10 affected components
Microsoft Forefront Client Security
Microsoft Windows Defender
Microsoft Forefront Security For Exchange Server
Microsoft Antigen For Exchange
Microsoft Antigen For Smtp Gateway
Microsoft Malware Protection Engine=0.1.13.192
Microsoft Windows Live OneCare
Microsoft Diagnostics And Recovery Toolkit=6.0
Microsoft Malware Protection Engine=1.1.3520.0
Microsoft Forefront Security For Sharepoint

Event History

May 13, 2008
CVE Published
via MITRE·10:00 PM
Data Sourced
via MITRE·10:00 PM
Description
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Frequently Asked Questions

1

What is the severity of CVE-2008-1437?

CVE-2008-1437 is classified as a denial of service vulnerability allowing context-dependent attackers to cause engine hang and restart.

2

How do I fix CVE-2008-1437?

To mitigate CVE-2008-1437, ensure that you update the Microsoft Malware Protection Engine to the latest version.

3

What products are affected by CVE-2008-1437?

CVE-2008-1437 affects multiple Microsoft products, including Microsoft Forefront Client Security and Microsoft Windows Defender.

4

Can CVE-2008-1437 be exploited remotely?

Yes, CVE-2008-1437 can be exploited by context-dependent attackers through crafted files.

5

What are the symptoms of CVE-2008-1437 exploitation?

Symptoms of CVE-2008-1437 exploitation include unexpected engine hangs and restarts during file scan operations.

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2026 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203