Multiple F-Secure anti-virus products, including Internet Security 2006 through 2008, Anti-Virus 2006 through 2008, F-Secure Protection Service, and others, allow remote attackers to bypass malware detection via a crafted CAB archive.
Affected Software
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| F-secure_anti-virus | F-secure | 2006 (including) | 2006 (including) |
| F-secure_anti-virus | F-secure | 2007 (including) | 2007 (including) |
| F-secure_anti-virus | F-secure | 2007-second_edition (including) | 2007-second_edition (including) |
| F-secure_anti-virus | F-secure | 2008 (including) | 2008 (including) |
| F-secure_anti-virus_client_security | F-secure | 6.03 (including) | 6.03 (including) |
| F-secure_anti-virus_client_security | F-secure | 6.04 (including) | 6.04 (including) |
| F-secure_anti-virus_client_security | F-secure | 7.01 (including) | 7.01 (including) |
| F-secure_anti-virus_client_security | F-secure | 7.10 (including) | 7.10 (including) |
| F-secure_anti-virus_for_linux | F-secure | 4.65 (including) | 4.65 (including) |
| F-secure_anti-virus_for_workstations | F-secure | 5.44 (including) | 5.44 (including) |
| F-secure_anti-virus_for_workstations | F-secure | 7.00 (including) | 7.00 (including) |
| F-secure_anti-virus_for_workstations | F-secure | 7.10 (including) | 7.10 (including) |
| F-secure_anti-virus_linux_client_security | F-secure | 5.52 (including) | 5.52 (including) |
| F-secure_anti-virus_linux_client_security | F-secure | 5.53 (including) | 5.53 (including) |
| F-secure_internet_security | F-secure | 2006 (including) | 2006 (including) |
| F-secure_internet_security | F-secure | 2007 (including) | 2007 (including) |
| F-secure_internet_security | F-secure | 2007-second_edition (including) | 2007-second_edition (including) |
| F-secure_internet_security | F-secure | 2008 (including) | 2008 (including) |
| F-secure_protection_service_for_business | F-secure | * | 3.00 (including) |
| F-secure_protection_service_for_consumers | F-secure | * | 7.00 (including) |
References
- http://secunia.com/advisories/28919
- http://www.f-secure.com/security/fsc-2008-1.shtml
- http://www.securitytracker.com/id?1019405
- http://www.securitytracker.com/id?1019412
- http://www.securitytracker.com/id?1019413
- http://www.vupen.com/english/advisories/2008/0544/references
- https://exchange.xforce.ibmcloud.com/vulnerabilities/40480
- http://secunia.com/advisories/28919
- http://www.f-secure.com/security/fsc-2008-1.shtml
- http://www.securitytracker.com/id?1019405
- http://www.securitytracker.com/id?1019412
- http://www.securitytracker.com/id?1019413
- http://www.vupen.com/english/advisories/2008/0544/references
- https://exchange.xforce.ibmcloud.com/vulnerabilities/40480