CVE-2008-1280
Acronis True Image Windows Agent 1.0.0.54 and earlier, included in Acronis True Image Enterprise...
Acronis True Image Windows Agent 1.0.0.54 and earlier, included in Acronis True Image Enterprise Server 9.5.0.8072 and the other True Image packages, allows remote attackers to cause a denial of service (crash) via a malformed packet to port 9876, which triggers a NULL pointer dereference.
Exploit likelihood
What each source reports
NVD Score used
Acronis True Image Windows Agent 1.0.0.54 and earlier, included in Acronis True Image Enterprise Server 9.5.0.8072 and the other True Image packages, allows remote attackers to cause a denial of service (crash) via a malformed packet to port 9876, which triggers a NULL pointer dereference.
- Record
CVE-2008-1280- CVSS 2.0
- 5.0 Medium
AV:N/AC:L/Au:N/C:N/I:N/A:P - Weakness
- CWE-20
- Updated
- 2026-11-02
CVE List No score
Acronis True Image Windows Agent 1.0.0.54 and earlier, included in Acronis True Image Enterprise Server 9.5.0.8072 and the other True Image packages, allows remote attackers to cause a denial of service (crash) via a malformed packet to port 9876, which triggers a NULL pointer dereference.
- Record
CVE-2008-1280- Updated
- 2026-11-02
EUVDEUVD-2008-1288 No score
Acronis True Image Windows Agent 1.0.0.54 and earlier, included in Acronis True Image Enterprise Server 9.5.0.8072 and the other True Image packages, allows remote attackers to cause a denial of service (crash) via a malformed packet to port 9876, which triggers a NULL pointer dereference.
- Record
EUVD-2008-1288- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-hhr2-mpx2-rw5r No score
Acronis True Image Windows Agent 1.0.0.54 and earlier, included in Acronis True Image Enterprise...
Acronis True Image Windows Agent 1.0.0.54 and earlier, included in Acronis True Image Enterprise Server 9.5.0.8072 and the other True Image packages, allows remote attackers to cause a denial of service (crash) via a malformed packet to port 9876, which triggers a NULL pointer dereference.
- Record
GHSA-hhr2-mpx2-rw5r- Weakness
- CWE-20
- Updated
- 2026-11-02
Affected products
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2008-1280 is a medium vulnerability (CVSS 5.0) in Acronis True Image, published March 10, 2008. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 2.46%, the 84th percentile. No source names a fixed version.
References
secunia.com/advisories/29306
exchange.xforce.ibmcloud.com/vulnerabilities/41070
vupen.com/english/advisories/2008/0812/references
aluigi.altervista.org/adv/acroagent-adv.txt
securityfocus.com/bid/28169
nvd.nist.gov/vuln/detail/CVE-2008-1280
github.com/advisories/GHSA-hhr2-mpx2-rw5r