← Database

CVE-2008-6085

HIGH CVSS: 7.6 Published: 2009-02-06 Modified: 2026-06-16

Description

Integer overflow in multiple F-Secure anti-virus products, including Internet Security 2006 through 2008, Anti-Virus 2006 through 2008, and others, when configured to scan inside compressed archives, allows remote attackers to execute arbitrary code via a crafted RPM compressed archive file, which triggers a buffer overflow.

Affected Platforms

F-Secure F-Secure Anti-Virus For MimesweeperF-Secure F-Secure Anti-VirusF-Secure F-Secure Anti-Virus For WorkstationsF-Secure F-Secure Linux SecurityF-Secure F-Secure Protection Service For ConsumersF-Secure F-Secure Home Server SecurityF-Secure F-Secure Anti-Virus For Microsoft ExchangeF-Secure F-Secure Anti-Virus For Windows ServersF-Secure F-Secure Internet Gatekeeper For LinuxF-Secure F-Secure Protection Service For Business

Weakness Type

CWE-189

References