CVE-2007-2967

F-Secure Anti-Virus - Denial of Service via Crafted ARJ Archives or FSG Packed Files

Title source: llm

Description

Multiple F-Secure anti-virus products for Microsoft Windows and Linux before 20070522 allow remote attackers to cause a denial of service (file scanning infinite loop) via certain crafted (1) ARJ archives or (2) FSG packed files.

References (15)

Core 15

Core References

Third Party Advisory, VDB Entry vdb-entry x_refsource_osvdb

http://osvdb.org/36725

Mailing List mailing-list x_refsource_fulldisc

http://lists.grok.org.uk/pipermail/full-disclosure/2007-June/063714.html

Various Sources x_refsource_misc

http://www.nruns.com/security_advisory_fsecure_arj.php

Third Party Advisory, VDB Entry vdb-entry x_refsource_sectrack

http://www.securitytracker.com/id?1018148

Third Party Advisory, VDB Entry vdb-entry x_refsource_sectrack

http://securitytracker.com/id?1018147

Third Party Advisory, VDB Entry vdb-entry x_refsource_sectrack

http://www.securitytracker.com/id?1018146

Third Party Advisory, VDB Entry mailing-list x_refsource_bugtraq

http://www.securityfocus.com/archive/1/470484/100/0/threaded

Vendor Advisory vdb-entry x_refsource_vupen

http://www.vupen.com/english/advisories/2007/1985

Mailing List mailing-list x_refsource_fulldisc

http://lists.grok.org.uk/pipermail/full-disclosure/2007-June/063715.html

Various Sources x_refsource_misc

http://www.nruns.com/security_advisory_fsecure_fsg.php

Third Party Advisory, VDB Entry vdb-entry x_refsource_osvdb

http://osvdb.org/36726

Patch, Vendor Advisory x_refsource_confirm

http://www.f-secure.com/security/fsc-2007-3.shtml

Vendor Advisory third-party-advisory x_refsource_secunia

http://secunia.com/advisories/25440

Third Party Advisory, VDB Entry mailing-list x_refsource_bugtraq

http://www.securityfocus.com/archive/1/470462/100/0/threaded

Third Party Advisory, VDB Entry vdb-entry x_refsource_xf

https://exchange.xforce.ibmcloud.com/vulnerabilities/34581

Scores

EPSS 0.0479

EPSS Percentile 90.9%

Details

CWE

CWE-20

Status published

Products (18)

f-secure/f-secure_anti-virus 2005

f-secure/f-secure_anti-virus 2006

f-secure/f-secure_anti-virus 2007

f-secure/f-secure_anti-virus < 4.65 (2 CPE variants)

f-secure/f-secure_anti-virus < 5.42

f-secure/f-secure_anti-virus < 5.44

f-secure/f-secure_anti-virus < 5.52

f-secure/f-secure_anti-virus < 5.61

f-secure/f-secure_anti-virus < 6.40

f-secure/f-secure_anti-virus_client_security < 6.03

... and 8 more

Published May 31, 2007

Tracked Since Feb 18, 2026