CVEvulnerability
CVE-2008-1412
6.8 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2008-03-20
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 6.8 MEDIUM — AV:N/AC:M/Au:N/C:P/I:P/A:P
- Weaknesses
- CWE-20
Description
Unspecified vulnerability in multiple F-Secure anti-virus products, including Internet Security 2006 through 2008, Anti-Virus 2006 through 2008, and others, allows remote attackers to execute arbitrary code or cause a denial of service (hang or crash) via a malformed archive that triggers an unhandled exception, as demonstrated by the PROTOS GENOME test suite for Archive Formats.
Affected configurations
• f-secure f-secure anti-virus 2006
• f-secure f-secure anti-virus 2007
• f-secure f-secure anti-virus 2008
• f-secure f-secure anti-virus client security (<= 6.04)
• f-secure f-secure anti-virus for linux (<= 4.65)
• f-secure f-secure anti-virus for workstations (<= 7.11)
• f-secure f-secure anti-virus linux client security (<= 5.54)
• f-secure f-secure client security (<= 7.11)
• f-secure f-secure internet security 2006
• f-secure f-secure internet security 2007
• f-secure f-secure internet security 2008
• f-secure f-secure mobile antivirus for s60 2nd edition
• f-secure f-secure mobile antivirus for windows mobile 5.0
• f-secure f-secure mobile antivirus for windows mobile 6
• f-secure f-secure mobile antivirus for windows mobile 2003
• f-secure f-secure mobile security for series 80
• f-secure f-secure protection service for business (<= 3.10)
• f-secure f-secure protection service for consumers (<= 7.00)
Related
Weakness · CWE (1)
- CWE-20 Improper Input Validation weakness
References
- http://secunia.com/advisories/29397 Vendor Advisory
- http://support.f-secure.com/enu/corporate/downloads/hotfixes/av-cs-hotfixes.shtml support.f-secure.com
- http://support.f-secure.com/enu/corporate/downloads/hotfixes/av-mimesweeper-hotfixes.shtml support.f-secure.com
- http://www.cert.fi/haavoittuvuudet/joint-advisory-archive-formats.html www.cert.fi
- http://www.ee.oulu.fi/research/ouspg/protos/testing/c10/archive/ www.ee.oulu.fi
- http://www.f-secure.com/security/fsc-2008-2.shtml Patch
- http://www.securityfocus.com/bid/28282 www.securityfocus.com
- http://www.securitytracker.com/id?1019618 www.securitytracker.com
- http://www.securitytracker.com/id?1019619 www.securitytracker.com
- http://www.securitytracker.com/id?1019620 www.securitytracker.com
- http://www.vupen.com/english/advisories/2008/0903/references www.vupen.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/41234 exchange.xforce.ibmcloud.com
- http://secunia.com/advisories/29397 Vendor Advisory
- http://support.f-secure.com/enu/corporate/downloads/hotfixes/av-cs-hotfixes.shtml support.f-secure.com
- http://support.f-secure.com/enu/corporate/downloads/hotfixes/av-mimesweeper-hotfixes.shtml support.f-secure.com
- http://www.cert.fi/haavoittuvuudet/joint-advisory-archive-formats.html www.cert.fi
- http://www.ee.oulu.fi/research/ouspg/protos/testing/c10/archive/ www.ee.oulu.fi
- http://www.f-secure.com/security/fsc-2008-2.shtml Patch
- http://www.securityfocus.com/bid/28282 www.securityfocus.com
- http://www.securitytracker.com/id?1019618 www.securitytracker.com
- http://www.securitytracker.com/id?1019619 www.securitytracker.com
- http://www.securitytracker.com/id?1019620 www.securitytracker.com
- http://www.vupen.com/english/advisories/2008/0903/references www.vupen.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/41234 exchange.xforce.ibmcloud.com