high7.6

CVE-2008-6085

Integer overflow in multiple F-Secure anti-virus products, including Internet Security 2006 through 2008, Anti-Virus 2006 through 2008, and others, when config…

Impact

Integer overflow in multiple F-Secure anti-virus products, including Internet Security 2006 through 2008, Anti-Virus 2006 through 2008, and others, when configured to scan inside compressed archives, allows remote attackers to execute arbitrary code via a crafted RPM compressed archive file, which triggers a buffer overflow.

Affected products

Vendor	Product	Affected versions
F-Secure	F-Secure Anti-Virus	Versions 7.02, 2006, 2007, 2008, 2009
F-Secure	F-Secure Anti-Virus For Citrix Servers	through 7.00
F-Secure	F-Secure Anti-Virus For Microsoft Exchange	through 7.10 Versions 6.62, 7.00
F-Secure	F-Secure Anti-Virus For Mimesweeper	through 5.61
F-Secure	F-Secure Anti-Virus For Windows Servers	through 8.00
F-Secure	F-Secure Anti-Virus For Workstations	Versions 7.10, 7.11
F-Secure	F-Secure Anti-Virus Linux Client Security	through 5.54 Versions 5.30, 5.52, 5.53
F-Secure	F-Secure Anti-Virus Linux Server Security	through 5.54 Versions 5.30, 5.52
F-Secure	F-Secure Client Security	through 7.12 Version 7.11
F-Secure	F-Secure Home Server Security	Version 2009
F-Secure	F-Secure Internet Gatekeeper For Linux	through 2.16
F-Secure	F-Secure Internet Gatekeeper For Windows	through 6.61

Weakness classification

CWE-189

Impact

Affected products

Weakness classification

References