CVEvulnerability
CVE-2008-6085
7.6 HIGH
Official page ↗
- Status
- Modified
- Published
- 2009-02-06
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 7.6 HIGH — AV:N/AC:H/Au:N/C:C/I:C/A:C
- Weaknesses
- CWE-189
Description
Integer overflow in multiple F-Secure anti-virus products, including Internet Security 2006 through 2008, Anti-Virus 2006 through 2008, and others, when configured to scan inside compressed archives, allows remote attackers to execute arbitrary code via a crafted RPM compressed archive file, which triggers a buffer overflow.
Affected configurations
• f-secure f-secure anti-virus 7.02
• f-secure f-secure anti-virus 2006
• f-secure f-secure anti-virus 2007
• f-secure f-secure anti-virus 2008
• f-secure f-secure anti-virus 2009
• f-secure f-secure anti-virus for citrix servers (<= 7.00)
• f-secure f-secure anti-virus for microsoft exchange (<= 7.10)
• f-secure f-secure anti-virus for microsoft exchange 6.62
• f-secure f-secure anti-virus for microsoft exchange 7.00
• f-secure f-secure anti-virus for mimesweeper (<= 5.61)
• f-secure f-secure anti-virus for windows servers (<= 8.00)
• f-secure f-secure anti-virus for workstations 7.10
• f-secure f-secure anti-virus for workstations 7.11
• f-secure f-secure anti-virus linux client security (<= 5.54)
• f-secure f-secure anti-virus linux client security 5.30
• f-secure f-secure anti-virus linux client security 5.52
• f-secure f-secure anti-virus linux client security 5.53
• f-secure f-secure anti-virus linux server security (<= 5.54)
• f-secure f-secure anti-virus linux server security 5.30
• f-secure f-secure anti-virus linux server security 5.52
• f-secure f-secure client security (<= 7.12)
• f-secure f-secure client security 7.11
• f-secure f-secure home server security 2009
• f-secure f-secure internet gatekeeper for linux (<= 2.16)
• f-secure f-secure internet gatekeeper for windows (<= 6.61)
• f-secure f-secure internet security 7.02
• f-secure f-secure internet security 2006
• f-secure f-secure internet security 2007
• f-secure f-secure internet security 2008
• f-secure f-secure internet security 2009
• f-secure f-secure linux security (<= 7.01)
• f-secure f-secure messaging security gateway (<= 5.0.4)
• f-secure f-secure messaging security gateway 4.0.7
• f-secure f-secure protection service for business (<= 3.10)
• f-secure f-secure protection service for business 3.00
• f-secure f-secure protection service for consumers (<= 8.00)
• f-secure f-secure protection service for consumers 5.00
• f-secure f-secure protection service for consumers 6.00
• f-secure f-secure protection service for consumers 7.00
Related
Weakness · not in database (1)
References
- http://secunia.com/advisories/32352 Vendor Advisory
- http://www.f-secure.com/security/fsc-2008-3.shtml Patch, Vendor Advisory
- http://www.securityfocus.com/bid/31846 www.securityfocus.com
- http://www.securitytracker.com/id?1021073 www.securitytracker.com
- http://www.vupen.com/english/advisories/2008/2874 www.vupen.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/46016 exchange.xforce.ibmcloud.com
- http://secunia.com/advisories/32352 Vendor Advisory
- http://www.f-secure.com/security/fsc-2008-3.shtml Patch, Vendor Advisory
- http://www.securityfocus.com/bid/31846 www.securityfocus.com
- http://www.securitytracker.com/id?1021073 www.securitytracker.com
- http://www.vupen.com/english/advisories/2008/2874 www.vupen.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/46016 exchange.xforce.ibmcloud.com