CVE-2008-0910 : Multiple F-Secure anti-virus products, including Internet Security 2006 through

Multiple F-Secure anti-virus products, including Internet Security 2006 through 2008, Anti-Virus 2006 through 2008, F-Secure Protection Service, and others, allow remote attackers to bypass malware detection via a crafted RAR archive. NOTE: this might be related to CVE-2008-0792.

Published 2008-02-22 22:44:00

Updated 2017-08-08 01:29:46

Source MITRE

View at NVD, CVE.org

Products affected by CVE-2008-0910

F-secure » F-secure Anti-virus » Version: 2006
cpe:2.3:a:f-secure:f-secure_anti-virus:2006:*:*:*:*:*:*:*
Matching versions
F-secure » F-secure Anti-virus » Version: 2007
cpe:2.3:a:f-secure:f-secure_anti-virus:2007:*:*:*:*:*:*:*
Matching versions
F-secure » F-secure Anti-virus » Version: 2007 Update Second Edition
cpe:2.3:a:f-secure:f-secure_anti-virus:2007:second_edition:*:*:*:*:*:*
Matching versions
F-secure » F-secure Anti-virus » Version: 2008
cpe:2.3:a:f-secure:f-secure_anti-virus:2008:*:*:*:*:*:*:*
Matching versions
F-secure » F-secure Internet Security » Version: 2006
cpe:2.3:a:f-secure:f-secure_internet_security:2006:*:*:*:*:*:*:*
Matching versions
F-secure » F-secure Internet Security » Version: 2007
cpe:2.3:a:f-secure:f-secure_internet_security:2007:*:*:*:*:*:*:*
Matching versions
F-secure » F-secure Internet Security » Version: 2008
cpe:2.3:a:f-secure:f-secure_internet_security:2008:*:*:*:*:*:*:*
Matching versions
F-secure » F-secure Internet Security » Version: 2007 Update Second Edition
cpe:2.3:a:f-secure:f-secure_internet_security:2007:second_edition:*:*:*:*:*:*
Matching versions
F-secure » F-secure Anti-virus Client Security » Version: 6.03
cpe:2.3:a:f-secure:f-secure_anti-virus_client_security:6.03:*:*:*:*:*:*:*
Matching versions
F-secure » F-secure Anti-virus Client Security » Version: 7.10
cpe:2.3:a:f-secure:f-secure_anti-virus_client_security:7.10:*:*:*:*:*:*:*
Matching versions
F-secure » F-secure Anti-virus Client Security » Version: 6.04
cpe:2.3:a:f-secure:f-secure_anti-virus_client_security:6.04:*:*:*:*:*:*:*
Matching versions
F-secure » F-secure Anti-virus Client Security » Version: 7.01
cpe:2.3:a:f-secure:f-secure_anti-virus_client_security:7.01:*:*:*:*:*:*:*
Matching versions
F-secure » F-secure Anti-virus Linux Client Security » Version: 5.52
cpe:2.3:a:f-secure:f-secure_anti-virus_linux_client_security:5.52:*:*:*:*:*:*:*
Matching versions
F-secure » F-secure Anti-virus Linux Client Security » Version: 5.53
cpe:2.3:a:f-secure:f-secure_anti-virus_linux_client_security:5.53:*:*:*:*:*:*:*
Matching versions
F-secure » F-secure Anti-virus For Linux » Version: 4.65
cpe:2.3:a:f-secure:f-secure_anti-virus_for_linux:4.65:*:*:*:*:*:*:*
Matching versions
F-secure » F-secure Anti-virus For Workstations » Version: 7.10
cpe:2.3:a:f-secure:f-secure_anti-virus_for_workstations:7.10:*:*:*:*:*:*:*
Matching versions
F-secure » F-secure Anti-virus For Workstations » Version: 5.44
cpe:2.3:a:f-secure:f-secure_anti-virus_for_workstations:5.44:*:*:*:*:*:*:*
Matching versions
F-secure » F-secure Anti-virus For Workstations » Version: 7.00
cpe:2.3:a:f-secure:f-secure_anti-virus_for_workstations:7.00:*:*:*:*:*:*:*
Matching versions
F-secure » F-secure Protection Service For Business
Versions up to, including, (<=) 3.00
cpe:2.3:a:f-secure:f-secure_protection_service_for_business:*:*:*:*:*:*:*:*
Matching versions
F-secure » F-secure Protection Service For Consumers
Versions up to, including, (<=) 7.00
cpe:2.3:a:f-secure:f-secure_protection_service_for_consumers:*:*:*:*:*:*:*:*
Matching versions

Exploit prediction scoring system (EPSS) score for CVE-2008-0910

EPSS FAQ

1.88%

Probability of exploitation activity in the next 30 days EPSS Score History

~ 88 %

Percentile, the proportion of vulnerabilities that are scored at or less

CVSS scores for CVE-2008-0910

Base Score	Base Severity	CVSS Vector	Exploitability Score	Impact Score	Score Source	First Seen
7.5	HIGH	AV:N/AC:L/Au:N/C:P/I:P/A:P	10.0	6.4	NIST
Access Vector: Network Access Complexity: Low Authentication: None Confidentiality Impact: Partial Integrity Impact: Partial Availability Impact: Partial

CWE ids for CVE-2008-0910

CWE-264

Assigned by: nvd@nist.gov (Primary)

References for CVE-2008-0910

Jump to

Vulnerability Details : CVE-2008-0910

Products affected by CVE-2008-0910

Exploit prediction scoring system (EPSS) score for CVE-2008-0910

CVSS scores for CVE-2008-0910

CWE ids for CVE-2008-0910

References for CVE-2008-0910