SOC status:Duty analyst on shift

UK Cyber Defence
VulnerabilityModified

CVE-2006-0338

Multiple F-Secure Anti-Virus products and versions for Windows and Linux, including Anti-Virus for Windows Servers 5.52 and earlier, Internet Security 2004, 2005 and 2006, and Anti-Virus for Linux Servers 4.64 and earlier, allow remote attackers to hide…

MEDIUM 5.0EPSS 2.98%

Does this matter?

Lower severity and a low EPSS score (2.98%). Track it; it rarely justifies an emergency change on its own.

Description

Multiple F-Secure Anti-Virus products and versions for Windows and Linux, including Anti-Virus for Windows Servers 5.52 and earlier, Internet Security 2004, 2005 and 2006, and Anti-Virus for Linux Servers 4.64 and earlier, allow remote attackers to hide arbitrary files and data via malformed (1) RAR and (2) ZIP archives, which are not properly scanned.

CVSS 2.0
5.0 MEDIUMAV:N/AC:L/Au:N/C:N/I:P/A:N
EPSS
2.98% probability · 87th percentile
CISA KEV
Not listed
Affected
f-secure/f-secure anti-virus · f-secure/f-secure internet security · f-secure/f-secure personal express · f-secure/internet gatekeeper
Source
cve@mitre.org

References

Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.