CVEvulnerability

CVE-2006-0338

5.0 MEDIUM Published 2006-01-21 Modified 2026-06-16 Official page ↗
Status
Modified
Published
2006-01-21
Last modified
2026-06-16
Assigner
[email protected]
CVSS 2.0 ([email protected])
5.0 MEDIUM — AV:N/AC:L/Au:N/C:N/I:P/A:N

Description

Multiple F-Secure Anti-Virus products and versions for Windows and Linux, including Anti-Virus for Windows Servers 5.52 and earlier, Internet Security 2004, 2005 and 2006, and Anti-Virus for Linux Servers 4.64 and earlier, allow remote attackers to hide arbitrary files and data via malformed (1) RAR and (2) ZIP archives, which are not properly scanned.

Affected configurations

• f-secure f-secure anti-virus 4.51 • f-secure f-secure anti-virus 4.52 • f-secure f-secure anti-virus 4.60 • f-secure f-secure anti-virus 4.61 • f-secure f-secure anti-virus 4.62 • f-secure f-secure anti-virus 4.64 • f-secure f-secure anti-virus 5.0 • f-secure f-secure anti-virus 5.5 • f-secure f-secure anti-virus 5.11 • f-secure f-secure anti-virus 5.41 • f-secure f-secure anti-virus 5.42 • f-secure f-secure anti-virus 5.43 • f-secure f-secure anti-virus 5.44 • f-secure f-secure anti-virus 5.52 • f-secure f-secure anti-virus 5.55 • f-secure f-secure anti-virus 6.01 • f-secure f-secure anti-virus 6.2 • f-secure f-secure anti-virus 6.21 • f-secure f-secure anti-virus 6.30 • f-secure f-secure anti-virus 6.30 sr1 • f-secure f-secure anti-virus 6.31 • f-secure f-secure anti-virus 6.40 • f-secure f-secure anti-virus 2003 • f-secure f-secure anti-virus 2004 • f-secure f-secure anti-virus 2005 • f-secure f-secure internet security 2004 • f-secure f-secure internet security 2005 • f-secure f-secure internet security 2006 • f-secure f-secure personal express 4.5 • f-secure f-secure personal express 4.6 • f-secure f-secure personal express 4.7 • f-secure f-secure personal express 5.0 • f-secure internet gatekeeper 2.06 • f-secure internet gatekeeper 2.14 • f-secure internet gatekeeper 6.32 • f-secure internet gatekeeper 6.41 • f-secure internet gatekeeper 6.42

References