CVE-2008-6085
highpriority · track · 32EPSS 0.055 · 93 %ileEUUSEPSS · scored 2026-10-28
Integer overflow in multiple F-Secure anti-virus products, including Internet Security 2006 through 2008, Anti-Virus 2006 through 2008, and others, when configured to scan inside compressed archives, allows remote attackers to execute arbitrary code via a crafted RPM compressed archive file, which triggers a buffer overflow.
cvss
Technical severity, 0–10. One row per scoring source.
base score 0–10 · higher = more severe · hover a vector to decode⚠ sources disagree · medium–high · 6.5–7.6
weaknesses
The CWE weakness classes this flaw belongs to.
affected products (40)
Products and version ranges known to be affected.
- f-secure f-secure anti-virus for citrix servers≤ 7.00nvdUScpe:2.3:a:f-secure:f-secure_anti-virus_for_citrix_servers:*:*:*:*:*:*:*:*
- f-secure f-secure anti-virus for microsoft exchange≤ 7.10nvdUScpe:2.3:a:f-secure:f-secure_anti-virus_for_microsoft_exchange:*:*:*:*:*:*:*:*
- f-secure f-secure anti-virus for microsoft exchange= 6.62nvdUScpe:2.3:a:f-secure:f-secure_anti-virus_for_microsoft_exchange:*:*:*:*:*:*:*:*
- f-secure f-secure anti-virus for microsoft exchange= 7.00nvdUScpe:2.3:a:f-secure:f-secure_anti-virus_for_microsoft_exchange:*:*:*:*:*:*:*:*
- f-secure f-secure anti-virus for mimesweeper≤ 5.61nvdUScpe:2.3:a:f-secure:f-secure_anti-virus_for_mimesweeper:*:*:*:*:*:*:*:*
- f-secure f-secure anti-virus for windows servers≤ 8.00nvdUScpe:2.3:a:f-secure:f-secure_anti-virus_for_windows_servers:*:*:*:*:*:*:*:*
- f-secure f-secure anti-virus for workstations= 7.10nvdUScpe:2.3:a:f-secure:f-secure_anti-virus_for_workstations:*:*:*:*:*:*:*:*
- f-secure f-secure anti-virus for workstations= 7.11nvdUScpe:2.3:a:f-secure:f-secure_anti-virus_for_workstations:*:*:*:*:*:*:*:*
- f-secure f-secure anti-virus linux client security≤ 5.54nvdUScpe:2.3:a:f-secure:f-secure_anti-virus_linux_client_security:*:*:*:*:*:*:*:*
- f-secure f-secure anti-virus linux client security= 5.30nvdUScpe:2.3:a:f-secure:f-secure_anti-virus_linux_client_security:*:*:*:*:*:*:*:*
- f-secure f-secure anti-virus linux client security= 5.52nvdUScpe:2.3:a:f-secure:f-secure_anti-virus_linux_client_security:*:*:*:*:*:*:*:*
- f-secure f-secure anti-virus linux client security= 5.53nvdUScpe:2.3:a:f-secure:f-secure_anti-virus_linux_client_security:*:*:*:*:*:*:*:*
- f-secure f-secure anti-virus linux server security≤ 5.54nvdUScpe:2.3:a:f-secure:f-secure_anti-virus_linux_server_security:*:*:*:*:*:*:*:*
- f-secure f-secure anti-virus linux server security= 5.30nvdUScpe:2.3:a:f-secure:f-secure_anti-virus_linux_server_security:*:*:*:*:*:*:*:*
also known as (2)
Other names and identifiers for this entity.
sources
Which sources assert this record, and when.
references (12)
External citations — patches, advisories, analysis.
- http://secunia.com/advisories/32352enisa_euvd
- http://www.f-secure.com/security/fsc-2008-3.shtmlenisa_euvd
- http://www.securityfocus.com/bid/31846enisa_euvd
- http://www.securitytracker.com/id?1021073enisa_euvd
- http://www.vupen.com/english/advisories/2008/2874enisa_euvd
- https://exchange.xforce.ibmcloud.com/vulnerabilities/46016enisa_euvd
- http://secunia.com/advisories/32352Vendor Advisorynvd
- http://www.f-secure.com/security/fsc-2008-3.shtmlPatchVendor Advisorynvd
Attackers weaponise vulnerabilities like this against internet-exposed services. See what is exposed on your perimeter with a free passive scan.
Free scan