« Volver al listado

CVE-2008-1412

Estado: ModificadaMedia (6.8)—

Unspecified vulnerability in multiple F-Secure anti-virus products, including Internet Security 2006 through 2008, Anti-Virus 2006 through 2008, and others, allows remote attackers to execute arbitrary code or cause a denial of service (hang or crash) via a malformed archive that triggers an unhandled exception, as demonstrated by the PROTOS GENOME test suite for Archive Formats.

CVSS

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

Tecnologías afectadas (12)

F-secure — F-secure Anti-virusF-secure — F-secure Anti-virus Client SecurityF-secure — F-secure Anti-virus FOR LinuxF-secure — F-secure Anti-virus FOR WorkstationsF-secure — F-secure Anti-virus Linux Client SecurityF-secure — F-secure Client SecurityF-secure — F-secure Internet SecurityF-secure — F-secure Mobile Antivirus FOR S60F-secure — F-secure Mobile Antivirus FOR Windows MobileF-secure — F-secure Mobile Security FOR Series 80F-secure — F-secure Protection Service FOR BusinessF-secure — F-secure Protection Service FOR Consumers

CWE

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2008-1412",
  "cveTags": [],
  "metrics": {
    "cvssMetricV2": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "version": "2.0",
          "baseScore": 6.8,
          "accessVector": "NETWORK",
          "vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
          "authentication": "NONE",
          "integrityImpact": "PARTIAL",
          "accessComplexity": "MEDIUM",
          "availabilityImpact": "PARTIAL",
          "confidentialityImpact": "PARTIAL"
        },
        "acInsufInfo": false,
        "impactScore": 6.4,
        "baseSeverity": "MEDIUM",
        "obtainAllPrivilege": false,
        "exploitabilityScore": 8.6,
        "obtainUserPrivilege": false,
        "obtainOtherPrivilege": true,
        "userInteractionRequired": false
      }
    ]
  },
  "affected": [
    {
      "source": "cve@mitre.org",
      "affectedData": [
        {
          "vendor": "n/a",
          "product": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ]
    }
  ],
  "published": "2008-03-20T10:44:00.000",
  "references": [
    {
      "url": "http://secunia.com/advisories/29397",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "cve@mitre.org"
    },
    {
      "url": "http://support.f-secure.com/enu/corporate/downloads/hotfixes/av-cs-hotfixes.shtml",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://support.f-secure.com/enu/corporate/downloads/hotfixes/av-mimesweeper-hotfixes.shtml",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://www.cert.fi/haavoittuvuudet/joint-advisory-archive-formats.html",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://www.ee.oulu.fi/research/ouspg/protos/testing/c10/archive/",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://www.f-secure.com/security/fsc-2008-2.shtml",
      "tags": [
        "Patch"
      ],
      "source": "cve@mitre.org"
    },
    {
      "url": "http://www.securityfocus.com/bid/28282",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://www.securitytracker.com/id?1019618",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://www.securitytracker.com/id?1019619",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://www.securitytracker.com/id?1019620",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://www.vupen.com/english/advisories/2008/0903/references",
      "source": "cve@mitre.org"
    },
    {
      "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/41234",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://secunia.com/advisories/29397",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://support.f-secure.com/enu/corporate/downloads/hotfixes/av-cs-hotfixes.shtml",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://support.f-secure.com/enu/corporate/downloads/hotfixes/av-mimesweeper-hotfixes.shtml",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.cert.fi/haavoittuvuudet/joint-advisory-archive-formats.html",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.ee.oulu.fi/research/ouspg/protos/testing/c10/archive/",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.f-secure.com/security/fsc-2008-2.shtml",
      "tags": [
        "Patch"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.securityfocus.com/bid/28282",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.securitytracker.com/id?1019618",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.securitytracker.com/id?1019619",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.securitytracker.com/id?1019620",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.vupen.com/english/advisories/2008/0903/references",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/41234",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    }
  ],
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "type": "Primary",
      "source": "nvd@nist.gov",
      "description": [
        {
          "lang": "en",
          "value": "CWE-20"
        },
        {
          "lang": "en",
          "value": "NVD-CWE-noinfo"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "Unspecified vulnerability in multiple F-Secure anti-virus products, including Internet Security 2006 through 2008, Anti-Virus 2006 through 2008, and others, allows remote attackers to execute arbitrary code or cause a denial of service (hang or crash) via a malformed archive that triggers an unhandled exception, as demonstrated by the PROTOS GENOME test suite for Archive Formats."
    },
    {
      "lang": "es",
      "value": "Vulnerabilidad no especificada en multiples productos anti-virus de F-Secure, incluidos Internet Security 2006 hasta 2008, Anti-Virus 2006 hasta 2008 y otros, permite a atacantes remotos ejecutar código de su elección o provocar una denegación de servicio (suspender o parar) utilizando un archivo defectuoso que provocará un excepción no manejada, como se ha demostrado por el paquete de pruebas PROTOS GENOME para formatos de archivo."
    }
  ],
  "lastModified": "2026-06-16T22:51:41.367",
  "configurations": [
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:f-secure:f-secure_anti-virus:2006:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "9A6B8424-EED8-4A09-9A9C-FC5F76A9FAF5"
            },
            {
              "criteria": "cpe:2.3:a:f-secure:f-secure_anti-virus:2007:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "1106DE08-DE9A-488B-8C5D-28E353CDEEEB"
            },
            {
              "criteria": "cpe:2.3:a:f-secure:f-secure_anti-virus:2007:second_edition:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "C8609465-1436-4F50-B7EE-0DF9DA7AA4CA"
            },
            {
              "criteria": "cpe:2.3:a:f-secure:f-secure_anti-virus:2008:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "B47EC4EB-268A-4BB9-820D-AA3DB8D1A655"
            },
            {
              "criteria": "cpe:2.3:a:f-secure:f-secure_anti-virus_client_security:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "1566EBF3-230F-415F-8E0A-1D55A35ABB50",
              "versionEndIncluding": "6.04"
            },
            {
              "criteria": "cpe:2.3:a:f-secure:f-secure_anti-virus_for_linux:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "DDE3B1C3-BBCF-4C7E-87B4-418E850CE097",
              "versionEndIncluding": "4.65"
            },
            {
              "criteria": "cpe:2.3:a:f-secure:f-secure_anti-virus_for_workstations:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "C103D696-73C5-4582-8DD4-B292467F4F20",
              "versionEndIncluding": "7.11"
            },
            {
              "criteria": "cpe:2.3:a:f-secure:f-secure_anti-virus_linux_client_security:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "1D3E6352-6BF9-4FE6-A572-07A31972A28D",
              "versionEndIncluding": "5.54"
            },
            {
              "criteria": "cpe:2.3:a:f-secure:f-secure_client_security:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "CDAB6D4E-4897-4E83-B601-169D93EC50EE",
              "versionEndIncluding": "7.11"
            },
            {
              "criteria": "cpe:2.3:a:f-secure:f-secure_internet_security:2006:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "C788A5AB-C847-476C-9767-C6711F2D4EA1"
            },
            {
              "criteria": "cpe:2.3:a:f-secure:f-secure_internet_security:2007:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "3972C7F1-8B78-4A5D-8A75-C6CA01E997DF"
            },
            {
              "criteria": "cpe:2.3:a:f-secure:f-secure_internet_security:2007:second_edition:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "C0DCADF7-B044-4646-B215-52685609ED49"
            },
            {
              "criteria": "cpe:2.3:a:f-secure:f-secure_internet_security:2008:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "08ED9945-DC9F-4F4F-B2EB-B63986BCC7D6"
            },
            {
              "criteria": "cpe:2.3:a:f-secure:f-secure_mobile_antivirus_for_s60:2nd_edition:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "E6C6312D-350F-4E12-ABB6-4748CB286D02"
            },
            {
              "criteria": "cpe:2.3:a:f-secure:f-secure_mobile_antivirus_for_windows_mobile:5.0:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "E5BA3FA3-3D16-4958-AC75-7380EFE8948A"
            },
            {
              "criteria": "cpe:2.3:a:f-secure:f-secure_mobile_antivirus_for_windows_mobile:6:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "757E27BF-8CC3-41E5-8348-350CFDAC4BA3"
            },
            {
              "criteria": "cpe:2.3:a:f-secure:f-secure_mobile_antivirus_for_windows_mobile:2003:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "39318388-DD54-4304-9C7D-6F7C1584D68B"
            },
            {
              "criteria": "cpe:2.3:a:f-secure:f-secure_mobile_security_for_series_80:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "C3454E64-9E87-4707-BC02-5A881F443084"
            },
            {
              "criteria": "cpe:2.3:a:f-secure:f-secure_protection_service_for_business:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "5A2E6D2C-5520-41DE-AF1D-7E47F9A99CE7",
              "versionEndIncluding": "3.10"
            },
            {
              "criteria": "cpe:2.3:a:f-secure:f-secure_protection_service_for_consumers:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "604EFE23-657D-406F-81BF-17BA524E8423",
              "versionEndIncluding": "7.00"
            }
          ],
          "operator": "OR"
        }
      ]
    }
  ],
  "sourceIdentifier": "cve@mitre.org"
}