CVE-2008-6085
06.02.2009, 11:30
Integer overflow in multiple F-Secure anti-virus products, including Internet Security 2006 through 2008, Anti-Virus 2006 through 2008, and others, when configured to scan inside compressed archives, allows remote attackers to execute arbitrary code via a crafted RPM compressed archive file, which triggers a buffer overflow.Enginsight
| Vendor | Product | Version |
|---|---|---|
| f-secure | f-secure_anti-virus | 7.02 |
| f-secure | f-secure_anti-virus_for_citrix_servers | 𝑥 ≤ 7.00 |
| f-secure | f-secure_anti-virus_for_microsoft_exchange | 𝑥 ≤ 7.10 |
| f-secure | f-secure_anti-virus_for_microsoft_exchange | 6.62 |
| f-secure | f-secure_anti-virus_for_microsoft_exchange | 7.00 |
| f-secure | f-secure_anti-virus_for_mimesweeper | 𝑥 ≤ 5.61 |
| f-secure | f-secure_anti-virus_for_windows_servers | 𝑥 ≤ 8.00 |
| f-secure | f-secure_anti-virus_for_workstations | 7.10 |
| f-secure | f-secure_anti-virus_for_workstations | 7.11 |
| f-secure | f-secure_anti-virus_linux_client_security | 𝑥 ≤ 5.54 |
| f-secure | f-secure_anti-virus_linux_client_security | 5.30 |
| f-secure | f-secure_anti-virus_linux_client_security | 5.52 |
| f-secure | f-secure_anti-virus_linux_client_security | 5.53 |
| f-secure | f-secure_anti-virus_linux_server_security | 𝑥 ≤ 5.54 |
| f-secure | f-secure_anti-virus_linux_server_security | 5.30 |
| f-secure | f-secure_anti-virus_linux_server_security | 5.52 |
| f-secure | f-secure_client_security | 𝑥 ≤ 7.12 |
| f-secure | f-secure_client_security | 7.11 |
| f-secure | f-secure_internet_gatekeeper_for_linux | 𝑥 ≤ 2.16 |
| f-secure | f-secure_internet_gatekeeper_for_windows | 𝑥 ≤ 6.61 |
| f-secure | f-secure_internet_security | 7.02 |
| f-secure | f-secure_linux_security | 𝑥 ≤ 7.01 |
| f-secure | f-secure_messaging_security_gateway | 𝑥 ≤ 5.0.4 |
| f-secure | f-secure_messaging_security_gateway | 4.0.7 |
| f-secure | f-secure_protection_service_for_business | 𝑥 ≤ 3.10 |
| f-secure | f-secure_protection_service_for_business | 3.00 |
| f-secure | f-secure_protection_service_for_consumers | 𝑥 ≤ 8.00 |
| f-secure | f-secure_protection_service_for_consumers | 5.00 |
| f-secure | f-secure_protection_service_for_consumers | 6.00 |
| f-secure | f-secure_protection_service_for_consumers | 7.00 |
𝑥
= Vulnerable software versions
Common Weakness Enumeration
References