F-secure » F-secure Anti-virus Linux Client Security : Security Vulnerabilities, CVEs, (Overflow)
Integer overflow in multiple F-Secure anti-virus products, including Internet Security 2006 through 2008, Anti-Virus 2006 through 2008, and others, when configured to scan inside compressed archives, allows remote attackers to execute arbitrary code via a crafted RPM compressed archive file, which triggers a buffer overflow.
Max CVSS
7.6
EPSS Score
6.17%
Published
2009-02-06
Updated
2017-08-08
Buffer overflow in the LHA decompression component in F-Secure anti-virus products for Microsoft Windows and Linux before 20070529 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted LHA archive, related to an integer wrap, a similar issue to CVE-2006-4335.
Max CVSS
7.5
EPSS Score
16.90%
Published
2007-05-31
Updated
2018-10-16
2 vulnerabilities found