CVEvulnerability
CVE-2006-0338
5.0 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2006-01-21
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 5.0 MEDIUM — AV:N/AC:L/Au:N/C:N/I:P/A:N
Description
Multiple F-Secure Anti-Virus products and versions for Windows and Linux, including Anti-Virus for Windows Servers 5.52 and earlier, Internet Security 2004, 2005 and 2006, and Anti-Virus for Linux Servers 4.64 and earlier, allow remote attackers to hide arbitrary files and data via malformed (1) RAR and (2) ZIP archives, which are not properly scanned.
Affected configurations
• f-secure f-secure anti-virus 4.51
• f-secure f-secure anti-virus 4.52
• f-secure f-secure anti-virus 4.60
• f-secure f-secure anti-virus 4.61
• f-secure f-secure anti-virus 4.62
• f-secure f-secure anti-virus 4.64
• f-secure f-secure anti-virus 5.0
• f-secure f-secure anti-virus 5.5
• f-secure f-secure anti-virus 5.11
• f-secure f-secure anti-virus 5.41
• f-secure f-secure anti-virus 5.42
• f-secure f-secure anti-virus 5.43
• f-secure f-secure anti-virus 5.44
• f-secure f-secure anti-virus 5.52
• f-secure f-secure anti-virus 5.55
• f-secure f-secure anti-virus 6.01
• f-secure f-secure anti-virus 6.2
• f-secure f-secure anti-virus 6.21
• f-secure f-secure anti-virus 6.30
• f-secure f-secure anti-virus 6.30 sr1
• f-secure f-secure anti-virus 6.31
• f-secure f-secure anti-virus 6.40
• f-secure f-secure anti-virus 2003
• f-secure f-secure anti-virus 2004
• f-secure f-secure anti-virus 2005
• f-secure f-secure internet security 2004
• f-secure f-secure internet security 2005
• f-secure f-secure internet security 2006
• f-secure f-secure personal express 4.5
• f-secure f-secure personal express 4.6
• f-secure f-secure personal express 4.7
• f-secure f-secure personal express 5.0
• f-secure internet gatekeeper 2.06
• f-secure internet gatekeeper 2.14
• f-secure internet gatekeeper 6.32
• f-secure internet gatekeeper 6.41
• f-secure internet gatekeeper 6.42
References
- http://secunia.com/advisories/18529 Patch, Vendor Advisory
- http://securitytracker.com/id?1015507 securitytracker.com
- http://securitytracker.com/id?1015508 securitytracker.com
- http://securitytracker.com/id?1015509 securitytracker.com
- http://securitytracker.com/id?1015510 securitytracker.com
- http://www.ciac.org/ciac/bulletins/q-103.shtml www.ciac.org
- http://www.f-secure.com/security/fsc-2006-1.shtml Patch
- http://www.osvdb.org/22633 www.osvdb.org
- http://www.securityfocus.com/bid/16309 Patch
- http://www.vupen.com/english/advisories/2006/0257 www.vupen.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/24199 exchange.xforce.ibmcloud.com
- http://secunia.com/advisories/18529 Patch, Vendor Advisory
- http://securitytracker.com/id?1015507 securitytracker.com
- http://securitytracker.com/id?1015508 securitytracker.com
- http://securitytracker.com/id?1015509 securitytracker.com
- http://securitytracker.com/id?1015510 securitytracker.com
- http://www.ciac.org/ciac/bulletins/q-103.shtml www.ciac.org
- http://www.f-secure.com/security/fsc-2006-1.shtml Patch
- http://www.osvdb.org/22633 www.osvdb.org
- http://www.securityfocus.com/bid/16309 Patch
- http://www.vupen.com/english/advisories/2006/0257 www.vupen.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/24199 exchange.xforce.ibmcloud.com