CVE-2008-1412

Severity Score

9.1

*CVSS v3

Exploit Likelihood

*EPSS

Affected Versions

*CPE

Public Exploits

*Multiple Sources

Exploited in Wild

*KEV

Decision

*SSVC

Descriptions

Unspecified vulnerability in multiple F-Secure anti-virus products, including Internet Security 2006 through 2008, Anti-Virus 2006 through 2008, and others, allows remote attackers to execute arbitrary code or cause a denial of service (hang or crash) via a malformed archive that triggers an unhandled exception, as demonstrated by the PROTOS GENOME test suite for Archive Formats.

Vulnerabilidad no especificada en multiples productos anti-virus de F-Secure, incluidos Internet Security 2006 hasta 2008, Anti-Virus 2006 hasta 2008 y otros, permite a atacantes remotos ejecutar código de su elección o provocar una denegación de servicio (suspender o parar) utilizando un archivo defectuoso que provocará un excepción no manejada, como se ha demostrado por el paquete de pruebas PROTOS GENOME para formatos de archivo.

*Credits: N/A

Attack Vector

Network

Attack Complexity

Low

Privileges Required

None

User Interaction

None

Scope

Unchanged

Confidentiality

None

Integrity

High

Availability

High

Attack Vector

Network

Attack Complexity

Medium

Authentication

None

Confidentiality

Partial

Integrity

Partial

Availability

Partial

* Common Vulnerability Scoring System

SSVC

Decision:-

Exploitation

Automatable

Tech. Impact

* Organization's Worst-case Scenario

Timeline

2008-03-19 CVE Reserved
2008-03-20 CVE Published
2024-08-07 CVE Updated
2025-05-07 EPSS Updated
---------- Exploited in Wild
---------- KEV Due Date
---------- First Exploit

CWE

CWE-20: Improper Input Validation

CAPEC

References (12)

URL	Tag	Source
http://support.f-secure.com/enu/corporate/downloads/hotfixes/av-cs-hotfixes.shtml	X_refsource_confirm
http://support.f-secure.com/enu/corporate/downloads/hotfixes/av-mimesweeper-hotfixes.shtml	X_refsource_confirm
http://www.cert.fi/haavoittuvuudet/joint-advisory-archive-formats.html	X_refsource_misc
http://www.ee.oulu.fi/research/ouspg/protos/testing/c10/archive	X_refsource_misc
http://www.securityfocus.com/bid/28282	Vdb Entry
http://www.securitytracker.com/id?1019618	Vdb Entry
http://www.securitytracker.com/id?1019619	Vdb Entry
http://www.securitytracker.com/id?1019620	Vdb Entry
http://www.vupen.com/english/advisories/2008/0903/references	Vdb Entry
https://exchange.xforce.ibmcloud.com/vulnerabilities/41234	Vdb Entry

URL	Date	SRC

URL	Date	SRC
http://www.f-secure.com/security/fsc-2008-2.shtml	2017-08-08

URL	Date	SRC
http://secunia.com/advisories/29397	2017-08-08

Affected Vendors, Products, and Versions

Vendor		Product				Version		Other		Status
Vendor	Product	Version	Other	Status	<-- -->	Vendor	Product	Version	Other	Status
F-secure Search vendor "F-secure"		F-secure Anti-virus Search vendor "F-secure" for product "F-secure Anti-virus"				2006 Search vendor "F-secure" for product "F-secure Anti-virus" and version "2006"		-		Affected
F-secure Search vendor "F-secure"		F-secure Anti-virus Search vendor "F-secure" for product "F-secure Anti-virus"				2007 Search vendor "F-secure" for product "F-secure Anti-virus" and version "2007"		-		Affected
F-secure Search vendor "F-secure"		F-secure Anti-virus Search vendor "F-secure" for product "F-secure Anti-virus"				2007 Search vendor "F-secure" for product "F-secure Anti-virus" and version "2007"		second_edition		Affected
F-secure Search vendor "F-secure"		F-secure Anti-virus Search vendor "F-secure" for product "F-secure Anti-virus"				2008 Search vendor "F-secure" for product "F-secure Anti-virus" and version "2008"		-		Affected
F-secure Search vendor "F-secure"		F-secure Anti-virus Client Security Search vendor "F-secure" for product "F-secure Anti-virus Client Security"				<= 6.04 Search vendor "F-secure" for product "F-secure Anti-virus Client Security" and version " <= 6.04"		-		Affected
F-secure Search vendor "F-secure"		F-secure Anti-virus For Linux Search vendor "F-secure" for product "F-secure Anti-virus For Linux"				<= 4.65 Search vendor "F-secure" for product "F-secure Anti-virus For Linux" and version " <= 4.65"		-		Affected
F-secure Search vendor "F-secure"		F-secure Anti-virus For Workstations Search vendor "F-secure" for product "F-secure Anti-virus For Workstations"				<= 7.11 Search vendor "F-secure" for product "F-secure Anti-virus For Workstations" and version " <= 7.11"		-		Affected
F-secure Search vendor "F-secure"		F-secure Anti-virus Linux Client Security Search vendor "F-secure" for product "F-secure Anti-virus Linux Client Security"				<= 5.54 Search vendor "F-secure" for product "F-secure Anti-virus Linux Client Security" and version " <= 5.54"		-		Affected
F-secure Search vendor "F-secure"		F-secure Client Security Search vendor "F-secure" for product "F-secure Client Security"				<= 7.11 Search vendor "F-secure" for product "F-secure Client Security" and version " <= 7.11"		-		Affected
F-secure Search vendor "F-secure"		F-secure Internet Security Search vendor "F-secure" for product "F-secure Internet Security"				2006 Search vendor "F-secure" for product "F-secure Internet Security" and version "2006"		-		Affected
F-secure Search vendor "F-secure"		F-secure Internet Security Search vendor "F-secure" for product "F-secure Internet Security"				2007 Search vendor "F-secure" for product "F-secure Internet Security" and version "2007"		-		Affected
F-secure Search vendor "F-secure"		F-secure Internet Security Search vendor "F-secure" for product "F-secure Internet Security"				2007 Search vendor "F-secure" for product "F-secure Internet Security" and version "2007"		second_edition		Affected
F-secure Search vendor "F-secure"		F-secure Internet Security Search vendor "F-secure" for product "F-secure Internet Security"				2008 Search vendor "F-secure" for product "F-secure Internet Security" and version "2008"		-		Affected
F-secure Search vendor "F-secure"		F-secure Mobile Antivirus For S60 Search vendor "F-secure" for product "F-secure Mobile Antivirus For S60"				2nd_edition Search vendor "F-secure" for product "F-secure Mobile Antivirus For S60" and version "2nd_edition"		-		Affected
F-secure Search vendor "F-secure"		F-secure Mobile Antivirus For Windows Mobile Search vendor "F-secure" for product "F-secure Mobile Antivirus For Windows Mobile"				5.0 Search vendor "F-secure" for product "F-secure Mobile Antivirus For Windows Mobile" and version "5.0"		-		Affected
F-secure Search vendor "F-secure"		F-secure Mobile Antivirus For Windows Mobile Search vendor "F-secure" for product "F-secure Mobile Antivirus For Windows Mobile"				6 Search vendor "F-secure" for product "F-secure Mobile Antivirus For Windows Mobile" and version "6"		-		Affected
F-secure Search vendor "F-secure"		F-secure Mobile Antivirus For Windows Mobile Search vendor "F-secure" for product "F-secure Mobile Antivirus For Windows Mobile"				2003 Search vendor "F-secure" for product "F-secure Mobile Antivirus For Windows Mobile" and version "2003"		-		Affected
F-secure Search vendor "F-secure"		F-secure Mobile Security For Series 80 Search vendor "F-secure" for product "F-secure Mobile Security For Series 80"				*		-		Affected
F-secure Search vendor "F-secure"		F-secure Protection Service For Business Search vendor "F-secure" for product "F-secure Protection Service For Business"				<= 3.10 Search vendor "F-secure" for product "F-secure Protection Service For Business" and version " <= 3.10"		-		Affected
F-secure Search vendor "F-secure"		F-secure Protection Service For Consumers Search vendor "F-secure" for product "F-secure Protection Service For Consumers"				<= 7.00 Search vendor "F-secure" for product "F-secure Protection Service For Consumers" and version " <= 7.00"		-		Affected