high7.5

CVE-2007-2966

Buffer overflow in the LHA decompression component in F-Secure anti-virus products for Microsoft Windows and Linux before 20070529 allows remote attackers to e…

Impact

Buffer overflow in the LHA decompression component in F-Secure anti-virus products for Microsoft Windows and Linux before 20070529 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted LHA archive, related to an integer wrap, a similar issue to CVE-2006-4335.

Affected products

Vendor	Product	Affected versions
F-Secure	F-Secure Anti-Virus	through 4.65 through 5.42 through 5.44 through 5.52 through 5.61 through 6.40
F-Secure	F-Secure Anti-Virus Client Security	through 6.03
F-Secure	F-Secure Anti-Virus Linux Client Security	through 5.30
F-Secure	F-Secure Anti-Virus Linux Server Security	through 5.30
F-Secure	F-Secure Internet Security	Versions 2005, 2006, 2007
F-Secure	F-Secure Protection Service	through 6.40
F-Secure	Internet Gatekeeper	through 2.16 through 6.60

Weakness classification

CWE-119

Impact

Affected products

Weakness classification

References