CVE-2008-6085: f-secure f-secure_anti-virus Numeric Errors
Vulnerability summary
CVE-2008-6085 is a high (CVSS 7.6) Numeric Errors vulnerability in f-secure f-secure_anti-virus. EPSS estimates a 5.54% chance of exploitation in the next 30 days, higher than 92.7% of scored vulnerabilities.
Timeline
- 06-02-2009PublishedVulnerability first disclosed.
- 07-08-2024Last modifiedVulnerability information updated.
Description
Integer overflow in multiple F-Secure anti-virus products, including Internet Security 2006 through 2008, Anti-Virus 2006 through 2008, and others, when configured to scan inside compressed archives, allows remote attackers to execute arbitrary code via a crafted RPM compressed archive file, which triggers a buffer overflow.
CVSS metrics
1 score · 1 source · 1 versionEPSS trend
Probability
5.54%
Chance of exploitation in the next 30 days
Percentile
93%
Versus all other CVEs
30-day change
0.00 pp
From 5.54% on 19-09-2026
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
0 foundNo public exploits indexed.
Weaknesses
CWE · root causeAffected systems
F-secure17 products
- f-secure_anti-virus7.02 | 2006 | 2007 | 2008 | 2009
- f-secure_anti-virus_for_citrix_servers≤ 7.00
- f-secure_anti-virus_for_microsoft_exchange≤ 7.10 | 6.62 | 7.00
- f-secure_anti-virus_for_mimesweeper≤ 5.61
- f-secure_anti-virus_for_windows_servers≤ 8.00
1 vendor · 17 products