CVE-2008-1412

Description

Unspecified vulnerability in multiple F-Secure anti-virus products, including Internet Security 2006 through 2008, Anti-Virus 2006 through 2008, and others, allows remote attackers to execute arbitrary code or cause a denial of service (hang or crash) via a malformed archive that triggers an unhandled exception, as demonstrated by the PROTOS GENOME test suite for Archive Formats.

CVSS 2.0

6.8 MEDIUMAV:N/AC:M/Au:N/C:P/I:P/A:P

EPSS

3.60% probability · 89th percentile

CISA KEV

Not listed

Weakness

CWE-20

Affected

f-secure/f-secure anti-virus · f-secure/f-secure anti-virus client security · f-secure/f-secure anti-virus for linux · f-secure/f-secure anti-virus for workstations · f-secure/f-secure anti-virus linux client security · f-secure/f-secure client security · f-secure/f-secure internet security · f-secure/f-secure mobile antivirus for s60 · f-secure/f-secure mobile antivirus for windows mobile · f-secure/f-secure mobile security for series 80 · f-secure/f-secure protection service for business · f-secure/f-secure protection service for consumers

Source

cve@mitre.org

Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.