Vulnerabilities > CVE-2005-0350 - Remote Security vulnerability in F-Secure Anti-Virus

CVSS 7.5 - HIGH

Attack vector

NETWORK

Attack complexity

LOW

Privileges required

NONE

Confidentiality impact

PARTIAL

Integrity impact

PARTIAL

Availability impact

PARTIAL

network

low complexity

f-secure

NVD

Published: 2005-05-02

Updated: 2008-09-05

Summary

Heap-based buffer overflow in multiple F-Secure Anti-Virus and Internet Security products allows remote attackers to execute arbitrary code via a crafted ARJ archive.

Vulnerable Configurations

Part	Description	Count
Application	F-Secure F Secure F Secure Anti Virus * F Secure F Secure Anti Virus 4.60 F Secure F Secure Anti Virus 5.5 F Secure F Secure Anti Virus 2004 F Secure F Secure Anti Virus 2005 F Secure F Secure Internet Security 2004 F Secure F Secure Internet Security 2005 F Secure F Secure Personal Express * F Secure Internet Gatekeeper 2.06 F Secure Internet Gatekeeper *	20

References

http://www.f-secure.com/security/fsc-2005-1.shtml
http://xforce.iss.net/xforce/alerts/id/188