CVE-2008-1412

F-Secure anti-virus products - RCE/DoS

Title source: llm
STIX 2.1

Description

Unspecified vulnerability in multiple F-Secure anti-virus products, including Internet Security 2006 through 2008, Anti-Virus 2006 through 2008, and others, allows remote attackers to execute arbitrary code or cause a denial of service (hang or crash) via a malformed archive that triggers an unhandled exception, as demonstrated by the PROTOS GENOME test suite for Archive Formats.

References (12)

Core 12
Core References
Third Party Advisory, VDB Entry vdb-entry x_refsource_xf
https://exchange.xforce.ibmcloud.com/vulnerabilities/41234
Third Party Advisory vdb-entry x_refsource_vupen
http://www.vupen.com/english/advisories/2008/0903/references
Third Party Advisory, VDB Entry vdb-entry x_refsource_bid
http://www.securityfocus.com/bid/28282
Third Party Advisory, VDB Entry vdb-entry x_refsource_sectrack
http://www.securitytracker.com/id?1019620
Third Party Advisory, VDB Entry vdb-entry x_refsource_sectrack
http://www.securitytracker.com/id?1019619
Third Party Advisory, VDB Entry vdb-entry x_refsource_sectrack
http://www.securitytracker.com/id?1019618
Vendor Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/29397

Scores

EPSS 0.0360
EPSS Percentile 88.1%

Details

CWE
CWE-20
Status published
Products (18)
f-secure/f-secure_anti-virus 2006
f-secure/f-secure_anti-virus 2007 (2 CPE variants)
f-secure/f-secure_anti-virus 2008
f-secure/f-secure_anti-virus_client_security < 6.04
f-secure/f-secure_anti-virus_for_linux < 4.65
f-secure/f-secure_anti-virus_for_workstations < 7.11
f-secure/f-secure_anti-virus_linux_client_security < 5.54
f-secure/f-secure_client_security < 7.11
f-secure/f-secure_internet_security 2006
f-secure/f-secure_internet_security 2007 (2 CPE variants)
... and 8 more
Published Mar 20, 2008
Tracked Since Feb 18, 2026