VYPR
Get started
← All advisories
Unrated severityNVD Advisory· Published Feb 6, 2009· Updated Apr 23, 2026

CVE-2008-6085

CVE-2008-6085

Description

Integer overflow in multiple F-Secure anti-virus products, including Internet Security 2006 through 2008, Anti-Virus 2006 through 2008, and others, when configured to scan inside compressed archives, allows remote attackers to execute arbitrary code via a crafted RPM compressed archive file, which triggers a buffer overflow.

Affected products

41
  • F-Secure/Anti Virus6 versions
    cpe:2.3:a:f-secure:f-secure_anti-virus:2006:*:*:*:*:*:*:*+ 5 more
    • cpe:2.3:a:f-secure:f-secure_anti-virus:2006:*:*:*:*:*:*:*
    • cpe:2.3:a:f-secure:f-secure_anti-virus:2007:*:*:*:*:*:*:*
    • cpe:2.3:a:f-secure:f-secure_anti-virus:2007:*:second:*:*:*:*:*
    • cpe:2.3:a:f-secure:f-secure_anti-virus:2008:*:*:*:*:*:*:*
    • cpe:2.3:a:f-secure:f-secure_anti-virus:2009:*:*:*:*:*:*:*
    • cpe:2.3:a:f-secure:f-secure_anti-virus:7.02:*:*:*:*:*:*:*
  • F-Secure/F Secure Anti Virus For Citrix Servers
    cpe:2.3:a:f-secure:f-secure_anti-virus_for_citrix_servers:*:*:*:*:*:*:*:*
    Range: <=7.00
  • F-Secure/F Secure Anti Virus For Microsoft Exchange3 versions
    cpe:2.3:a:f-secure:f-secure_anti-virus_for_microsoft_exchange:*:*:*:*:*:*:*:*+ 2 more
    • cpe:2.3:a:f-secure:f-secure_anti-virus_for_microsoft_exchange:*:*:*:*:*:*:*:*range: <=7.10
    • cpe:2.3:a:f-secure:f-secure_anti-virus_for_microsoft_exchange:6.62:*:*:*:*:*:*:*
    • cpe:2.3:a:f-secure:f-secure_anti-virus_for_microsoft_exchange:7.00:*:*:*:*:*:*:*
  • F-Secure/F Secure Anti Virus For Mimesweeper
    cpe:2.3:a:f-secure:f-secure_anti-virus_for_mimesweeper:*:*:*:*:*:*:*:*
    Range: <=5.61
  • F-Secure/F Secure Anti Virus For Windows Servers
    cpe:2.3:a:f-secure:f-secure_anti-virus_for_windows_servers:*:*:*:*:*:*:*:*
    Range: <=8.00
  • F-Secure/F Secure Anti Virus For Workstations2 versions
    cpe:2.3:a:f-secure:f-secure_anti-virus_for_workstations:7.10:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:a:f-secure:f-secure_anti-virus_for_workstations:7.10:*:*:*:*:*:*:*
    • cpe:2.3:a:f-secure:f-secure_anti-virus_for_workstations:7.11:*:*:*:*:*:*:*
  • F-Secure/F Secure Anti Virus Linux Client Security4 versions
    cpe:2.3:a:f-secure:f-secure_anti-virus_linux_client_security:*:*:*:*:*:*:*:*+ 3 more
    • cpe:2.3:a:f-secure:f-secure_anti-virus_linux_client_security:*:*:*:*:*:*:*:*range: <=5.54
    • cpe:2.3:a:f-secure:f-secure_anti-virus_linux_client_security:5.30:*:*:*:*:*:*:*
    • cpe:2.3:a:f-secure:f-secure_anti-virus_linux_client_security:5.52:*:*:*:*:*:*:*
    • cpe:2.3:a:f-secure:f-secure_anti-virus_linux_client_security:5.53:*:*:*:*:*:*:*
  • F-Secure/F Secure Anti Virus Linux Server Security3 versions
    cpe:2.3:a:f-secure:f-secure_anti-virus_linux_server_security:*:*:*:*:*:*:*:*+ 2 more
    • cpe:2.3:a:f-secure:f-secure_anti-virus_linux_server_security:*:*:*:*:*:*:*:*range: <=5.54
    • cpe:2.3:a:f-secure:f-secure_anti-virus_linux_server_security:5.30:*:*:*:*:*:*:*
    • cpe:2.3:a:f-secure:f-secure_anti-virus_linux_server_security:5.52:*:*:*:*:*:*:*
  • F-Secure/Client Security2 versions
    cpe:2.3:a:f-secure:f-secure_client_security:*:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:a:f-secure:f-secure_client_security:*:*:*:*:*:*:*:*range: <=7.12
    • cpe:2.3:a:f-secure:f-secure_client_security:7.11:*:*:*:*:*:*:*
  • F-Secure/Home Server Security
    cpe:2.3:a:f-secure:f-secure_home_server_security:2009:*:*:*:*:*:*:*
  • F-Secure/F Secure Internet Gatekeeper For Linux
    cpe:2.3:a:f-secure:f-secure_internet_gatekeeper_for_linux:*:*:*:*:*:*:*:*
    Range: <=2.16
  • F-Secure/F Secure Internet Gatekeeper For Windows
    cpe:2.3:a:f-secure:f-secure_internet_gatekeeper_for_windows:*:*:*:*:*:*:*:*
    Range: <=6.61
  • F-Secure/Internet Security6 versions
    cpe:2.3:a:f-secure:f-secure_internet_security:2006:*:*:*:*:*:*:*+ 5 more
    • cpe:2.3:a:f-secure:f-secure_internet_security:2006:*:*:*:*:*:*:*
    • cpe:2.3:a:f-secure:f-secure_internet_security:2007:*:*:*:*:*:*:*
    • cpe:2.3:a:f-secure:f-secure_internet_security:2007:*:second:*:*:*:*:*
    • cpe:2.3:a:f-secure:f-secure_internet_security:2008:*:*:*:*:*:*:*
    • cpe:2.3:a:f-secure:f-secure_internet_security:2009:*:*:*:*:*:*:*
    • cpe:2.3:a:f-secure:f-secure_internet_security:7.02:*:*:*:*:*:*:*
  • F-Secure/Linux Security
    cpe:2.3:a:f-secure:f-secure_linux_security:*:*:*:*:*:*:*:*
    Range: <=7.01
  • F-Secure/F Secure Messaging Security Gateway2 versions
    cpe:2.3:a:f-secure:f-secure_messaging_security_gateway:*:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:a:f-secure:f-secure_messaging_security_gateway:*:*:*:*:*:*:*:*range: <=5.0.4
    • cpe:2.3:a:f-secure:f-secure_messaging_security_gateway:4.0.7:*:*:*:*:*:*:*
  • F-Secure/F Secure Protection Service For Business2 versions
    cpe:2.3:a:f-secure:f-secure_protection_service_for_business:*:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:a:f-secure:f-secure_protection_service_for_business:*:*:*:*:*:*:*:*range: <=3.10
    • cpe:2.3:a:f-secure:f-secure_protection_service_for_business:3.00:*:*:*:*:*:*:*
  • F-Secure/F Secure Protection Service For Consumers4 versions
    cpe:2.3:a:f-secure:f-secure_protection_service_for_consumers:*:*:*:*:*:*:*:*+ 3 more
    • cpe:2.3:a:f-secure:f-secure_protection_service_for_consumers:*:*:*:*:*:*:*:*range: <=8.00
    • cpe:2.3:a:f-secure:f-secure_protection_service_for_consumers:5.00:*:*:*:*:*:*:*
    • cpe:2.3:a:f-secure:f-secure_protection_service_for_consumers:6.00:*:*:*:*:*:*:*
    • cpe:2.3:a:f-secure:f-secure_protection_service_for_consumers:7.00:*:*:*:*:*:*:*

Patches

0

No patches discovered yet.

Vulnerability mechanics

AI mechanics synthesis has not run for this CVE yet.

References

6

News mentions

0

No linked articles in our index yet.