CVE-2008-1412
mediumpriority · track · 28EPSS 0.036 · 89 %ileEUUSEPSS · scored 2026-10-27
Unspecified vulnerability in multiple F-Secure anti-virus products, including Internet Security 2006 through 2008, Anti-Virus 2006 through 2008, and others, allows remote attackers to execute arbitrary code or cause a denial of service (hang or crash) via a malformed archive that triggers an unhandled exception, as demonstrated by the PROTOS GENOME test suite for Archive Formats.
cvss
Technical severity, 0–10. One row per scoring source.
base score 0–10 · higher = more severe · hover a vector to decode
weaknesses
The CWE weakness classes this flaw belongs to.
affected products (19)
Products and version ranges known to be affected.
- f-secure f-secure anti-virus client security≤ 6.04nvdUScpe:2.3:a:f-secure:f-secure_anti-virus_client_security:*:*:*:*:*:*:*:*
- f-secure f-secure anti-virus for linux≤ 4.65nvdUScpe:2.3:a:f-secure:f-secure_anti-virus_for_linux:*:*:*:*:*:*:*:*
- f-secure f-secure anti-virus for workstations≤ 7.11nvdUScpe:2.3:a:f-secure:f-secure_anti-virus_for_workstations:*:*:*:*:*:*:*:*
- f-secure f-secure anti-virus linux client security≤ 5.54nvdUScpe:2.3:a:f-secure:f-secure_anti-virus_linux_client_security:*:*:*:*:*:*:*:*
- f-secure f-secure client security≤ 7.11nvdUScpe:2.3:a:f-secure:f-secure_client_security:*:*:*:*:*:*:*:*
- f-secure f-secure internet security= 2006nvdUScpe:2.3:a:f-secure:f-secure_internet_security:*:*:*:*:*:*:*:*
- f-secure f-secure internet security= 2007nvdUScpe:2.3:a:f-secure:f-secure_internet_security:*:*:*:*:*:*:*:*
- f-secure f-secure internet security= 2008nvdUScpe:2.3:a:f-secure:f-secure_internet_security:*:*:*:*:*:*:*:*
- f-secure f-secure mobile antivirus for s60= 2nd_editionnvdUScpe:2.3:a:f-secure:f-secure_mobile_antivirus_for_s60:*:*:*:*:*:*:*:*
- f-secure f-secure mobile antivirus for windows mobile= 2003nvdUScpe:2.3:a:f-secure:f-secure_mobile_antivirus_for_windows_mobile:*:*:*:*:*:*:*:*
- f-secure f-secure mobile antivirus for windows mobile= 5.0nvdUScpe:2.3:a:f-secure:f-secure_mobile_antivirus_for_windows_mobile:*:*:*:*:*:*:*:*
- f-secure f-secure mobile antivirus for windows mobile= 6nvdUScpe:2.3:a:f-secure:f-secure_mobile_antivirus_for_windows_mobile:*:*:*:*:*:*:*:*
- f-secure f-secure mobile security for series 80all versionsnvdUScpe:2.3:a:f-secure:f-secure_mobile_security_for_series_80:*:*:*:*:*:*:*:*
- f-secure f-secure protection service for business≤ 3.10nvdUScpe:2.3:a:f-secure:f-secure_protection_service_for_business:*:*:*:*:*:*:*:*
- f-secure f-secure protection service for consumers≤ 7.00nvdUScpe:2.3:a:f-secure:f-secure_protection_service_for_consumers:*:*:*:*:*:*:*:*
also known as (2)
Other names and identifiers for this entity.
sources
Which sources assert this record, and when.
references (24)
External citations — patches, advisories, analysis.
- http://secunia.com/advisories/29397enisa_euvd
- http://support.f-secure.com/enu/corporate/downloads/hotfixes/av-cs-hotfixes.shtmlenisa_euvd
- http://support.f-secure.com/enu/corporate/downloads/hotfixes/av-mimesweeper-hotfixes.shtmlenisa_euvd
- http://www.cert.fi/haavoittuvuudet/joint-advisory-archive-formats.htmlenisa_euvd
- http://www.ee.oulu.fi/research/ouspg/protos/testing/c10/archive/enisa_euvd
- http://www.f-secure.com/security/fsc-2008-2.shtmlenisa_euvd
- http://www.securityfocus.com/bid/28282enisa_euvd
- http://www.securitytracker.com/id?1019618enisa_euvd
Attackers weaponise vulnerabilities like this against internet-exposed services. See what is exposed on your perimeter with a free passive scan.
Free scan