PT-2009-1560 · F Secure · F-Secure Internet Security+1

Published 2009-02-06 · Updated 2017-08-08 · CVE-2008-6085

Positive Technologies (AI Summary)

CVSS v2.0

7.6

High

Base vector

AV:N/AC:H/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions F-Secure Internet Security versions 2006 through 2008 F-Secure Anti-Virus versions 2006 through 2008

Description The issue is related to an integer overflow that occurs when the software is configured to scan inside compressed archives. This allows remote attackers to execute arbitrary code via a crafted RPM compressed archive file, which triggers a buffer overflow.

Recommendations For F-Secure Internet Security versions 2006 through 2008, consider disabling the scanning of compressed archives until a fix is available. For F-Secure Anti-Virus versions 2006 through 2008, restrict access to the archive scanning feature to minimize the risk of exploitation.

Fix

Weakness Enumeration

CWE-189

Related Identifiers

CVE-2008-6085

Affected Products

F-Secure Anti-Virus

F-Secure Internet Security

References · 7

• http://f-secure.com/security/fsc-2008-3.shtml · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2008-6085 · Security Note
• http://secunia.com/advisories/32352 · Vendor Advisory
• http://vupen.com/english/advisories/2008/2874 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/46016 · Note
• http://securitytracker.com/id?1021073 · Note
• http://securityfocus.com/bid/31846 · Note