CVEvulnerability
CVE-2004-2405
6.4 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2004-12-31
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 6.4 MEDIUM — AV:N/AC:L/Au:N/C:N/I:P/A:P
Description
Buffer overflow in multiple F-Secure Anti-Virus products, including F-Secure Anti-Virus 5.42 and earlier, allows remote attackers to bypass scanning or cause a denial of service (crash or module restart), depending on the product, via a malformed LHA archive.
Affected configurations
• f-secure f-secure anti-virus (<= 4.52)
• f-secure f-secure anti-virus (<= 5.42)
• f-secure f-secure anti-virus (<= 5.52)
• f-secure f-secure anti-virus (<= 6.21)
• f-secure f-secure anti-virus (<= 2004)
• f-secure f-secure anti-virus 4.60
• f-secure f-secure for firewalls (<= 6.20)
• f-secure f-secure internet security (<= 2004)
• f-secure internet gatekeeper (<= 6.32)
References
- http://secunia.com/advisories/11712 Patch, Vendor Advisory
- http://www.f-secure.com/security/fsc-2004-1.shtml Patch, Vendor Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/16258 exchange.xforce.ibmcloud.com
- http://secunia.com/advisories/11712 Patch, Vendor Advisory
- http://www.f-secure.com/security/fsc-2004-1.shtml Patch, Vendor Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/16258 exchange.xforce.ibmcloud.com