CVE-2008-1437

CVE-2008-1437 is an unspecified denial-of-service vulnerability affecting Microsoft Malware Protection Engine (mpengine.dll) versions 1.1.3520.0 and 0.1.13.192, present in various Microsoft products including Antigen, Forefront, and Windows Defender. An unauthenticated attacker can trigger an engine hang and restart by submitting a specially crafted file, leading to a partial denial of service. While the CVSS score is 5.0, indicating medium severity, its EPSS score and FAUCET Risk Score are notably high, suggesting a higher potential for exploitation. There is no known public exploit code, nor is there evidence of active exploitation or significant community discussion.