CVE-2008-6085
f-secure: no CVSS score yet. EPSS 5.5% chance of exploitation in the next 30 days.
Integer overflow in multiple F-Secure anti-virus products, including Internet Security 2006 through 2008, Anti-Virus 2006 through 2008, and others, when configured to scan inside compressed archives, allows remote attackers to execute arbitrary code via a crafted RPM compressed archive file, which triggers a buffer overflow.
- EPSS
- 5.5% chance of exploitation in the next 30 days; higher than 92% of CVEs (scores of 2026-11-01)
- CWE
- CWE-189
- Published
- Modified
- Record from
- the NVD, synced
Affected
- f-secure:f-secure_anti-virus
- f-secure:f-secure_anti-virus_for_citrix_servers
- f-secure:f-secure_anti-virus_for_microsoft_exchange
- f-secure:f-secure_anti-virus_for_mimesweeper
- f-secure:f-secure_anti-virus_for_windows_servers
- f-secure:f-secure_anti-virus_for_workstations
- f-secure:f-secure_anti-virus_linux_client_security
- f-secure:f-secure_anti-virus_linux_server_security
- f-secure:f-secure_client_security
- f-secure:f-secure_home_server_security
- f-secure:f-secure_internet_gatekeeper_for_linux
- f-secure:f-secure_internet_gatekeeper_for_windows
- f-secure:f-secure_internet_security
- f-secure:f-secure_linux_security
- f-secure:f-secure_messaging_security_gateway
- f-secure:f-secure_protection_service_for_business
- f-secure:f-secure_protection_service_for_consumers