Symantec Mail Security for Microsoft Exchange (SMSMSE) scan processes (SAVFMSESp.exe) crash when processing certain message content.
Last Updated October 28, 2015
When a certain message content is processed by SMSMSE with at least one content filtering rule configured to check against terms in message bodies, the SMSMSE scan process (SAVFMSESp.exe) processing that message crashes.
Errors found in Application Event log:
Event ID 168:
The process SAVFMSESp.exe was restarted.
Event ID 218:
The message "<<Message Subject>>" located in SMTP has
violated the following policy settings:
Rule: Unscannable File Rule
The following actions were taken on it:
The message "<<Message Subject>>" was marked
for Quarantine for the following reason(s):
Scan Engine error. Error code: 0xC0090086
A buffer overflow condition is encountered when certain message content is processed against content filtering rules set to scan message bodies.
This issue is resolved in SMSMSE 7.5.3. Upgrade to 7.5.3 to resolve this problem.
A hotfix has been created for this issue. Instructions to install the hotfix can be found under the readme.txt file.