CVE-2004-2405

published 2004-12-31

CVE-2004-2405: Buffer overflow in multiple F-Secure Anti-Virus products, including F-Secure Anti-Virus 5.42 and earlier, allows remote attackers to bypass scanning or cause a…

Priority P4 22 medium 6.4 CVSS 2.0

AV N AC L Au N C N I P A P

Buffer overflow in multiple F-Secure Anti-Virus products, including F-Secure Anti-Virus 5.42 and earlier, allows remote attackers to bypass scanning or cause a denial of service (crash or module restart), depending on the product, via a malformed LHA archive.

Affected

9 ranges

Vendor	Product	Version range	Fixed in
f-secure	f-secure_anti-virus	<= 4.52	—
f-secure	f-secure_anti-virus	<= 5.42	—
f-secure	f-secure_anti-virus	<= 5.52	—
f-secure	f-secure_anti-virus	<= 6.21	—
f-secure	f-secure_anti-virus	<= 2004	—
f-secure	f-secure_anti-virus	—	—
f-secure	f-secure_for_firewalls	<= 6.20	—
f-secure	f-secure_internet_security	<= 2004	—
f-secure	internet_gatekeeper	<= 6.32	—

Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.