PT-2009-1560 · F Secure · F-Secure Internet Security+1

Publicado 2009-02-06 · Atualizado 2017-08-08 · CVE-2008-6085

Positive Technologies (AI Summary)

CVSS v2.0

7.6

Alta

Vetor base

AV:N/AC:H/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions F-Secure Internet Security versions 2006 through 2008 F-Secure Anti-Virus versions 2006 through 2008

Description The issue is related to an integer overflow that occurs when the software is configured to scan inside compressed archives. This allows remote attackers to execute arbitrary code via a crafted RPM compressed archive file, which triggers a buffer overflow.

Recommendations For F-Secure Internet Security versions 2006 through 2008, consider disabling the scanning of compressed archives until a fix is available. For F-Secure Anti-Virus versions 2006 through 2008, restrict access to the archive scanning feature to minimize the risk of exploitation.

Correção

Enumeração de Fraquezas

CWE-189

Identificadores relacionados

CVE-2008-6085

Produtos afetados

F-Secure Anti-Virus

F-Secure Internet Security

Referências · 7

• http://vupen.com/english/advisories/2008/2874 · Nota
• https://exchange.xforce.ibmcloud.com/vulnerabilities/46016 · Nota
• http://f-secure.com/security/fsc-2008-3.shtml · Aviso do Fabricante
• http://securitytracker.com/id?1021073 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2008-6085 · Nota de Segurança
• http://securityfocus.com/bid/31846 · Nota
• http://secunia.com/advisories/32352 · Aviso do Fabricante