Denial of Service Vulnerability in Microsoft Malware Protection Engine

CVE-2008-1438

Summary

The Microsoft Malware Protection Engine contains an unspecified vulnerability that can lead to a denial of service situation. Attackers can exploit this flaw by submitting specially crafted files, which result in the creation of oversized temporary files and ultimately exhaust disk space. This affects various Microsoft products relying on the mpengine.dll, compromising their operational stability.

References