Format string vulnerability in F-Secure Anti-Virus Client Security 6.02 allows local users to cause a denial of service and possibly gain privileges via format string specifiers in the Management Server name field on the Communication settings page.
Affected Software
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| F-secure_anti-virus | F-secure | 6.02 (including) | 6.02 (including) |
References
- http://osvdb.org/34764
- http://securityreason.com/securityalert/2472
- http://www.layereddefense.com/F-SecureMar18.html
- http://www.securityfocus.com/archive/1/463190/100/0/threaded
- http://www.securityfocus.com/bid/23023
- http://www.vupen.com/english/advisories/2007/1055
- http://osvdb.org/34764
- http://securityreason.com/securityalert/2472
- http://www.layereddefense.com/F-SecureMar18.html
- http://www.securityfocus.com/archive/1/463190/100/0/threaded
- http://www.securityfocus.com/bid/23023
- http://www.vupen.com/english/advisories/2007/1055