CVE-2008-1412

published 2008-03-20

CVE-2008-1412: Unspecified vulnerability in multiple F-Secure anti-virus products, including Internet Security 2006 through 2008, Anti-Virus 2006 through 2008, and others…

Priority P4 29 medium 6.8 CVSS 2.0

AV N AC M Au N C P I P A P

Unspecified vulnerability in multiple F-Secure anti-virus products, including Internet Security 2006 through 2008, Anti-Virus 2006 through 2008, and others, allows remote attackers to execute arbitrary code or cause a denial of service (hang or crash) via a malformed archive that triggers an unhandled exception, as demonstrated by the PROTOS GENOME test suite for Archive Formats.

Affected

17 ranges

Vendor	Product	Version range	Fixed in
f-secure	f-secure_anti-virus	—	—
f-secure	f-secure_anti-virus	—	—
f-secure	f-secure_anti-virus	—	—
f-secure	f-secure_anti-virus_client_security	<= 6.04	—
f-secure	f-secure_anti-virus_for_linux	<= 4.65	—
f-secure	f-secure_anti-virus_for_workstations	<= 7.11	—
f-secure	f-secure_anti-virus_linux_client_security	<= 5.54	—
f-secure	f-secure_client_security	<= 7.11	—
f-secure	f-secure_internet_security	—	—
f-secure	f-secure_internet_security	—	—
f-secure	f-secure_internet_security	—	—
f-secure	f-secure_mobile_antivirus_for_s60	—	—
f-secure	f-secure_mobile_antivirus_for_windows_mobile	—	—
f-secure	f-secure_mobile_antivirus_for_windows_mobile	—	—
f-secure	f-secure_mobile_antivirus_for_windows_mobile	—	—
f-secure	f-secure_protection_service_for_business	<= 3.10	—
f-secure	f-secure_protection_service_for_consumers	<= 7.00	—

Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.

CWE-20