CVE-2008-1438

CVE-2008-1438 describes an unspecified vulnerability in Microsoft Malware Protection Engine (mpengine.dll) versions 1.1.3520.0 and 0.1.13.192, affecting numerous Microsoft products including Forefront and Antigen. This flaw allows an unauthenticated, remote attacker to cause a denial of service by exhausting disk space. By submitting a file with crafted data structures, the engine creates excessively large temporary files. The vulnerability has a CVSS score of 5.0 (Medium), indicating a low attack complexity and no authentication required, but only results in partial availability impact. Its EPSS score of 0.43712 suggests a relatively low likelihood of exploitation compared to most CVEs. There is no evidence of active exploitation, nor are there any public exploit codes available in Metasploit, Nuclei, or ExploitDB. The vulnerability has garnered minimal community discussion and media coverage, suggesting it is not a widely recognized or exploited threat.