CVE-2007-2966

Buffer overflow in the LHA decompression component in F-Secure anti-virus products for Microsoft Windows and Linux before 20070529 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted LHA archive, related to an integer wrap, a similar issue to CVE-2006-4335.

• f-secure f-secure anti-virus (<= 4.65) • f-secure f-secure anti-virus (<= 5.42) • f-secure f-secure anti-virus (<= 5.44) • f-secure f-secure anti-virus (<= 5.52) • f-secure f-secure anti-virus (<= 5.61) • f-secure f-secure anti-virus (<= 6.40) • f-secure f-secure anti-virus 2005 • f-secure f-secure anti-virus 2006 • f-secure f-secure anti-virus 2007 • f-secure f-secure anti-virus client security (<= 6.03) • f-secure f-secure anti-virus linux client security (<= 5.30) • f-secure f-secure anti-virus linux server security (<= 5.30) • f-secure f-secure internet security 2005 • f-secure f-secure internet security 2006 • f-secure f-secure internet security 2007 • f-secure f-secure protection service (<= 6.40) • f-secure internet gatekeeper (<= 2.16) • f-secure internet gatekeeper (<= 6.60)