CVEvulnerability

CVE-2008-6085

7.6 HIGH Published 2009-02-06 Modified 2026-06-16 Official page ↗
Status
Modified
Published
2009-02-06
Last modified
2026-06-16
Assigner
[email protected]
CVSS 2.0 ([email protected])
7.6 HIGH — AV:N/AC:H/Au:N/C:C/I:C/A:C
Weaknesses
CWE-189

Description

Integer overflow in multiple F-Secure anti-virus products, including Internet Security 2006 through 2008, Anti-Virus 2006 through 2008, and others, when configured to scan inside compressed archives, allows remote attackers to execute arbitrary code via a crafted RPM compressed archive file, which triggers a buffer overflow.

Affected configurations

• f-secure f-secure anti-virus 7.02 • f-secure f-secure anti-virus 2006 • f-secure f-secure anti-virus 2007 • f-secure f-secure anti-virus 2008 • f-secure f-secure anti-virus 2009 • f-secure f-secure anti-virus for citrix servers (<= 7.00) • f-secure f-secure anti-virus for microsoft exchange (<= 7.10) • f-secure f-secure anti-virus for microsoft exchange 6.62 • f-secure f-secure anti-virus for microsoft exchange 7.00 • f-secure f-secure anti-virus for mimesweeper (<= 5.61) • f-secure f-secure anti-virus for windows servers (<= 8.00) • f-secure f-secure anti-virus for workstations 7.10 • f-secure f-secure anti-virus for workstations 7.11 • f-secure f-secure anti-virus linux client security (<= 5.54) • f-secure f-secure anti-virus linux client security 5.30 • f-secure f-secure anti-virus linux client security 5.52 • f-secure f-secure anti-virus linux client security 5.53 • f-secure f-secure anti-virus linux server security (<= 5.54) • f-secure f-secure anti-virus linux server security 5.30 • f-secure f-secure anti-virus linux server security 5.52 • f-secure f-secure client security (<= 7.12) • f-secure f-secure client security 7.11 • f-secure f-secure home server security 2009 • f-secure f-secure internet gatekeeper for linux (<= 2.16) • f-secure f-secure internet gatekeeper for windows (<= 6.61) • f-secure f-secure internet security 7.02 • f-secure f-secure internet security 2006 • f-secure f-secure internet security 2007 • f-secure f-secure internet security 2008 • f-secure f-secure internet security 2009 • f-secure f-secure linux security (<= 7.01) • f-secure f-secure messaging security gateway (<= 5.0.4) • f-secure f-secure messaging security gateway 4.0.7 • f-secure f-secure protection service for business (<= 3.10) • f-secure f-secure protection service for business 3.00 • f-secure f-secure protection service for consumers (<= 8.00) • f-secure f-secure protection service for consumers 5.00 • f-secure f-secure protection service for consumers 6.00 • f-secure f-secure protection service for consumers 7.00

Related

Weakness · not in database (1)

References