CVEvulnerability

CVE-2008-1412

6.8 MEDIUM Published 2008-03-20 Modified 2026-06-16 Official page ↗
Status
Modified
Published
2008-03-20
Last modified
2026-06-16
Assigner
[email protected]
CVSS 2.0 ([email protected])
6.8 MEDIUM — AV:N/AC:M/Au:N/C:P/I:P/A:P
Weaknesses
CWE-20

Description

Unspecified vulnerability in multiple F-Secure anti-virus products, including Internet Security 2006 through 2008, Anti-Virus 2006 through 2008, and others, allows remote attackers to execute arbitrary code or cause a denial of service (hang or crash) via a malformed archive that triggers an unhandled exception, as demonstrated by the PROTOS GENOME test suite for Archive Formats.

Affected configurations

• f-secure f-secure anti-virus 2006 • f-secure f-secure anti-virus 2007 • f-secure f-secure anti-virus 2008 • f-secure f-secure anti-virus client security (<= 6.04) • f-secure f-secure anti-virus for linux (<= 4.65) • f-secure f-secure anti-virus for workstations (<= 7.11) • f-secure f-secure anti-virus linux client security (<= 5.54) • f-secure f-secure client security (<= 7.11) • f-secure f-secure internet security 2006 • f-secure f-secure internet security 2007 • f-secure f-secure internet security 2008 • f-secure f-secure mobile antivirus for s60 2nd edition • f-secure f-secure mobile antivirus for windows mobile 5.0 • f-secure f-secure mobile antivirus for windows mobile 6 • f-secure f-secure mobile antivirus for windows mobile 2003 • f-secure f-secure mobile security for series 80 • f-secure f-secure protection service for business (<= 3.10) • f-secure f-secure protection service for consumers (<= 7.00)

Related

Weakness · CWE (1)

  • CWE-20 Improper Input Validation weakness

References