PT-2006-1409 · F Secure · F-Secure Internet Security+2

Published 2006-01-21 · Updated 2017-07-20 · CVE-2006-0337

Positive Technologies (AI Summary)

CVSS v2.0

7.5

High

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions F-Secure Anti-Virus for Windows Servers versions 5.52 and earlier F-Secure Internet Security versions 2004, 2005, 2006 F-Secure Anti-Virus for Linux Servers versions 4.64 and earlier

Description A buffer overflow issue in F-Secure Anti-Virus products allows remote attackers to execute arbitrary code via crafted ZIP archives. This issue affects multiple products and versions for both Windows and Linux.

Recommendations For F-Secure Anti-Virus for Windows Servers versions 5.52 and earlier, update to a version later than 5.52 to resolve the issue. For F-Secure Internet Security versions 2004, 2005, 2006, update to a version later than 2006 to resolve the issue. For F-Secure Anti-Virus for Linux Servers versions 4.64 and earlier, update to a version later than 4.64 to resolve the issue.

Fix

Related Identifiers

CVE-2006-0337

Affected Products

F-Secure Anti-Virus For Linux Servers

F-Secure Anti-Virus For Windows Servers

F-Secure Internet Security

References · 12

• http://f-secure.com/security/fsc-2006-1.shtml · Vendor Advisory
• http://secunia.com/advisories/18529 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2006-0337 · Security Note
• http://vupen.com/english/advisories/2006/0257 · Note
• http://securitytracker.com/id?1015507 · Note
• http://ciac.org/ciac/bulletins/q-103.shtml · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/24198 · Note
• http://securitytracker.com/id?1015510 · Note
• http://osvdb.org/22632 · Note
• http://securitytracker.com/id?1015509 · Note
• http://securityfocus.com/bid/16309 · Note
• http://securitytracker.com/id?1015508 · Note