CVE-2008-6085 Integer overflow in multiple F-Secure anti-virus products, including Internet Security 2006 through 2008, Anti-Virus 2006 through 2008, and others, when configured to scan inside compressed archives,....
HighCVSS 7.6
EPSS 5.5%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Integer overflow in multiple F-Secure anti-virus products, including Internet Security 2006 through 2008, Anti-Virus 2006 through 2008, and others, when configured to scan inside compressed archives, allows remote attackers to execute arbitrary code via a crafted RPM compressed archive file, which triggers a buffer overflow.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| f-secure anti-virus | = 7.02 | No fix listed |
| f-secure anti-virus | = 2006 | No fix listed |
| f-secure anti-virus | = 2007 | No fix listed |
| f-secure anti-virus | = 2008 | No fix listed |
| f-secure anti-virus | = 2009 | No fix listed |
| f-secure anti-virus for citrix servers | <= 7.00 | No fix listed |
| f-secure anti-virus for microsoft exchange | <= 7.10 | No fix listed |
| f-secure anti-virus for microsoft exchange | = 6.62 | No fix listed |
| f-secure anti-virus for microsoft exchange | = 7.00 | No fix listed |
| f-secure anti-virus for mimesweeper | <= 5.61 | No fix listed |
| f-secure anti-virus for windows servers | <= 8.00 | No fix listed |
| f-secure anti-virus for workstations | = 7.10 | No fix listed |
| f-secure anti-virus for workstations | = 7.11 | No fix listed |
| f-secure anti-virus linux client security | <= 5.54 | No fix listed |
| f-secure anti-virus linux client security | = 5.30 | No fix listed |
| f-secure anti-virus linux client security | = 5.52 | No fix listed |
| f-secure anti-virus linux client security | = 5.53 | No fix listed |
| f-secure anti-virus linux server security | <= 5.54 | No fix listed |
| f-secure anti-virus linux server security | = 5.30 | No fix listed |
| f-secure anti-virus linux server security | = 5.52 | No fix listed |
| f-secure client security | <= 7.12 | No fix listed |
| f-secure client security | = 7.11 | No fix listed |
| f-secure home server security | = 2009 | No fix listed |
| f-secure internet gatekeeper for linux | <= 2.16 | No fix listed |
| f-secure internet gatekeeper for windows | <= 6.61 | No fix listed |
Show 14 more
| Product | Affected versions | Fixed in |
|---|---|---|
| f-secure internet security | = 7.02 | No fix listed |
| f-secure internet security | = 2006 | No fix listed |
| f-secure internet security | = 2007 | No fix listed |
| f-secure internet security | = 2008 | No fix listed |
| f-secure internet security | = 2009 | No fix listed |
| f-secure linux security | <= 7.01 | No fix listed |
| f-secure messaging security gateway | <= 5.0.4 | No fix listed |
| f-secure messaging security gateway | = 4.0.7 | No fix listed |
| f-secure protection service for business | <= 3.10 | No fix listed |
| f-secure protection service for business | = 3.00 | No fix listed |
| f-secure protection service for consumers | <= 8.00 | No fix listed |
| f-secure protection service for consumers | = 5.00 | No fix listed |
| f-secure protection service for consumers | = 6.00 | No fix listed |
| f-secure protection service for consumers | = 7.00 | No fix listed |
References
- 32352 third-party-advisory vendor-advisory
- www.f-secure.com patch vendor-advisory
- 31846 vdb-entry
- 1021073 vdb-entry
- ADV-2008-2874 vdb-entry
- fsecure-multipleproducts-rpm-bo(46016) vdb-entry