medium6.8

CVE-2008-1412

Unspecified vulnerability in multiple F-Secure anti-virus products, including Internet Security 2006 through 2008, Anti-Virus 2006 through 2008, and others, al…

Impact

Unspecified vulnerability in multiple F-Secure anti-virus products, including Internet Security 2006 through 2008, Anti-Virus 2006 through 2008, and others, allows remote attackers to execute arbitrary code or cause a denial of service (hang or crash) via a malformed archive that triggers an unhandled exception, as demonstrated by the PROTOS GENOME test suite for Archive Formats.

Affected products

Vendor	Product	Affected versions
F-Secure	F-Secure Anti-Virus	Versions 2006, 2007, 2008
F-Secure	F-Secure Anti-Virus Client Security	through 6.04
F-Secure	F-Secure Anti-Virus For Linux	through 4.65
F-Secure	F-Secure Anti-Virus For Workstations	through 7.11
F-Secure	F-Secure Anti-Virus Linux Client Security	through 5.54
F-Secure	F-Secure Client Security	through 7.11
F-Secure	F-Secure Internet Security	Versions 2006, 2007, 2008
F-Secure	F-Secure Mobile Antivirus For S60	Version 2nd_edition
F-Secure	F-Secure Mobile Antivirus For Windows Mobile	Versions 5.0, 6, 2003
F-Secure	F-Secure Mobile Security For Series 80	All versions
F-Secure	F-Secure Protection Service For Business	through 3.10
F-Secure	F-Secure Protection Service For Consumers	through 7.00

Weakness classification

CWE-20

Impact

Affected products

Weakness classification

References