CVEvulnerability
CVE-2007-2967
10.0 HIGH
Official page ↗
- Status
- Modified
- Published
- 2007-05-31
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 10.0 HIGH — AV:N/AC:L/Au:N/C:C/I:C/A:C
- Weaknesses
- CWE-20
Description
Multiple F-Secure anti-virus products for Microsoft Windows and Linux before 20070522 allow remote attackers to cause a denial of service (file scanning infinite loop) via certain crafted (1) ARJ archives or (2) FSG packed files.
Affected configurations
• f-secure f-secure anti-virus (<= 4.65)
• f-secure f-secure anti-virus (<= 5.42)
• f-secure f-secure anti-virus (<= 5.44)
• f-secure f-secure anti-virus (<= 5.52)
• f-secure f-secure anti-virus (<= 5.61)
• f-secure f-secure anti-virus (<= 6.40)
• f-secure f-secure anti-virus 2005
• f-secure f-secure anti-virus 2006
• f-secure f-secure anti-virus 2007
• f-secure f-secure anti-virus client security (<= 6.03)
• f-secure f-secure anti-virus linux client security (<= 5.30)
• f-secure f-secure anti-virus linux server security (<= 5.30)
• f-secure f-secure internet security 2005
• f-secure f-secure internet security 2006
• f-secure f-secure internet security 2007
• f-secure f-secure protection service (<= 6.40)
• f-secure internet gatekeeper (<= 2.16)
• f-secure internet gatekeeper (<= 6.60)
Related
Weakness · CWE (1)
- CWE-20 Improper Input Validation weakness
References
- http://lists.grok.org.uk/pipermail/full-disclosure/2007-June/063714.html lists.grok.org.uk
- http://lists.grok.org.uk/pipermail/full-disclosure/2007-June/063715.html lists.grok.org.uk
- http://osvdb.org/36725 osvdb.org
- http://osvdb.org/36726 osvdb.org
- http://secunia.com/advisories/25440 Vendor Advisory
- http://securitytracker.com/id?1018147 securitytracker.com
- http://www.f-secure.com/security/fsc-2007-3.shtml Patch, Vendor Advisory
- http://www.nruns.com/security_advisory_fsecure_arj.php www.nruns.com
- http://www.nruns.com/security_advisory_fsecure_fsg.php www.nruns.com
- http://www.securityfocus.com/archive/1/470462/100/0/threaded www.securityfocus.com
- http://www.securityfocus.com/archive/1/470484/100/0/threaded www.securityfocus.com
- http://www.securitytracker.com/id?1018146 www.securitytracker.com
- http://www.securitytracker.com/id?1018148 www.securitytracker.com
- http://www.vupen.com/english/advisories/2007/1985 Vendor Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/34581 exchange.xforce.ibmcloud.com
- http://lists.grok.org.uk/pipermail/full-disclosure/2007-June/063714.html lists.grok.org.uk
- http://lists.grok.org.uk/pipermail/full-disclosure/2007-June/063715.html lists.grok.org.uk
- http://osvdb.org/36725 osvdb.org
- http://osvdb.org/36726 osvdb.org
- http://secunia.com/advisories/25440 Vendor Advisory
- http://securitytracker.com/id?1018147 securitytracker.com
- http://www.f-secure.com/security/fsc-2007-3.shtml Patch, Vendor Advisory
- http://www.nruns.com/security_advisory_fsecure_arj.php www.nruns.com
- http://www.nruns.com/security_advisory_fsecure_fsg.php www.nruns.com
- http://www.securityfocus.com/archive/1/470462/100/0/threaded www.securityfocus.com
- http://www.securityfocus.com/archive/1/470484/100/0/threaded www.securityfocus.com
- http://www.securitytracker.com/id?1018146 www.securitytracker.com
- http://www.securitytracker.com/id?1018148 www.securitytracker.com
- http://www.vupen.com/english/advisories/2007/1985 Vendor Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/34581 exchange.xforce.ibmcloud.com