CVE-2008-6085
highPriorität · verfolgen · 32EPSS 0.055 · 93. PerzentilEUUSEPSS · bewertet 2026-10-28
Integer overflow in multiple F-Secure anti-virus products, including Internet Security 2006 through 2008, Anti-Virus 2006 through 2008, and others, when configured to scan inside compressed archives, allows remote attackers to execute arbitrary code via a crafted RPM compressed archive file, which triggers a buffer overflow.
cvss
Technischer Schweregrad, 0–10. Eine Zeile je Quelle.
Basiswert 0–10 · höher = schwerwiegender · Vektor überfahren zum Auflösen⚠ Quellen uneinig · medium–high · 6.5–7.6
schwächen
Die CWE-Schwächeklassen, zu denen dies gehört.
betroffene Produkte (40)
Betroffene Produkte und Versionsbereiche.
- f-secure f-secure anti-virus for citrix servers≤ 7.00nvdUScpe:2.3:a:f-secure:f-secure_anti-virus_for_citrix_servers:*:*:*:*:*:*:*:*
- f-secure f-secure anti-virus for microsoft exchange≤ 7.10nvdUScpe:2.3:a:f-secure:f-secure_anti-virus_for_microsoft_exchange:*:*:*:*:*:*:*:*
- f-secure f-secure anti-virus for microsoft exchange= 6.62nvdUScpe:2.3:a:f-secure:f-secure_anti-virus_for_microsoft_exchange:*:*:*:*:*:*:*:*
- f-secure f-secure anti-virus for microsoft exchange= 7.00nvdUScpe:2.3:a:f-secure:f-secure_anti-virus_for_microsoft_exchange:*:*:*:*:*:*:*:*
- f-secure f-secure anti-virus for mimesweeper≤ 5.61nvdUScpe:2.3:a:f-secure:f-secure_anti-virus_for_mimesweeper:*:*:*:*:*:*:*:*
- f-secure f-secure anti-virus for windows servers≤ 8.00nvdUScpe:2.3:a:f-secure:f-secure_anti-virus_for_windows_servers:*:*:*:*:*:*:*:*
- f-secure f-secure anti-virus for workstations= 7.10nvdUScpe:2.3:a:f-secure:f-secure_anti-virus_for_workstations:*:*:*:*:*:*:*:*
- f-secure f-secure anti-virus for workstations= 7.11nvdUScpe:2.3:a:f-secure:f-secure_anti-virus_for_workstations:*:*:*:*:*:*:*:*
- f-secure f-secure anti-virus linux client security≤ 5.54nvdUScpe:2.3:a:f-secure:f-secure_anti-virus_linux_client_security:*:*:*:*:*:*:*:*
- f-secure f-secure anti-virus linux client security= 5.30nvdUScpe:2.3:a:f-secure:f-secure_anti-virus_linux_client_security:*:*:*:*:*:*:*:*
- f-secure f-secure anti-virus linux client security= 5.52nvdUScpe:2.3:a:f-secure:f-secure_anti-virus_linux_client_security:*:*:*:*:*:*:*:*
- f-secure f-secure anti-virus linux client security= 5.53nvdUScpe:2.3:a:f-secure:f-secure_anti-virus_linux_client_security:*:*:*:*:*:*:*:*
- f-secure f-secure anti-virus linux server security≤ 5.54nvdUScpe:2.3:a:f-secure:f-secure_anti-virus_linux_server_security:*:*:*:*:*:*:*:*
- f-secure f-secure anti-virus linux server security= 5.30nvdUScpe:2.3:a:f-secure:f-secure_anti-virus_linux_server_security:*:*:*:*:*:*:*:*
auch bekannt als (2)
Weitere Namen und Kennungen dieser Entität.
quellen
Welche Quellen diesen Datensatz belegen und wann.
Referenzen (12)
Externe Belege — Patches, Meldungen, Analysen.
- http://secunia.com/advisories/32352enisa_euvd
- http://www.f-secure.com/security/fsc-2008-3.shtmlenisa_euvd
- http://www.securityfocus.com/bid/31846enisa_euvd
- http://www.securitytracker.com/id?1021073enisa_euvd
- http://www.vupen.com/english/advisories/2008/2874enisa_euvd
- https://exchange.xforce.ibmcloud.com/vulnerabilities/46016enisa_euvd
- http://secunia.com/advisories/32352Vendor Advisorynvd
- http://www.f-secure.com/security/fsc-2008-3.shtmlPatchVendor Advisorynvd
Angreifer nutzen Schwachstellen wie diese gegen im Internet exponierte Dienste aus. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan