CVE-2008-1412
Unspecified vulnerability in multiple F-Secure anti-virus products, including Internet Security 2006 through 2008, Anti-Virus 2006 through 2008, and others, allows remote attackers to execute arbitrary code or cause a denial of service (hang or crash) via a malformed archive that triggers an unhandled exception, as demonstrated by the PROTOS GENOME test suite for Archive Formats.
- EPSS
- 3.6% chance of exploitation in the next 30 days; higher than 89% of CVEs (scores of 2026-10-31)
- CWE
- CWE-20
- Published
- Modified
- Record from
- the NVD, synced
Affected
- f-secure:f-secure_anti-virus
- f-secure:f-secure_anti-virus_client_security
- f-secure:f-secure_anti-virus_for_linux
- f-secure:f-secure_anti-virus_for_workstations
- f-secure:f-secure_anti-virus_linux_client_security
- f-secure:f-secure_client_security
- f-secure:f-secure_internet_security
- f-secure:f-secure_mobile_antivirus_for_s60
- f-secure:f-secure_mobile_antivirus_for_windows_mobile
- f-secure:f-secure_mobile_security_for_series_80
- f-secure:f-secure_protection_service_for_business
- f-secure:f-secure_protection_service_for_consumers
References
- http://secunia.com/advisories/29397
- http://support.f-secure.com/enu/corporate/downloads/hotfixes/av-cs-hotfixes.shtml
- http://support.f-secure.com/enu/corporate/downloads/hotfixes/av-mimesweeper-hotfixes.shtml
- http://www.cert.fi/haavoittuvuudet/joint-advisory-archive-formats.html
- http://www.ee.oulu.fi/research/ouspg/protos/testing/c10/archive/