CVE-2008-0792

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2008-0792
Multiple F-Secure anti-virus products, including Internet Security 2006 through 2008, Anti-Virus 2006 through 2008, F-Secure Protection Service, and others, allow remote attackers to bypass malware detection via a crafted CAB archive.

5.8 /10

CVSS v2.0 : MEDIUM

V2 Legend

Vector : AV:N/AC:M/Au:N/C:P/I:P/A:N

Exploitability : 8.6 / Impact : 4.9

Access Vector NETWORK

Access Complexity MEDIUM

Authentication NONE

Confidentiality Impact PARTIAL

Integrity Impact PARTIAL

Availability Impact NONE

References
Link Resource
http://secunia.com/advisories/28919 Vendor Advisory
http://www.f-secure.com/security/fsc-2008-1.shtml Patch
http://www.securitytracker.com/id?1019405
http://www.securitytracker.com/id?1019412
http://www.securitytracker.com/id?1019413
http://www.vupen.com/english/advisories/2008/0544/references Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/40480
http://secunia.com/advisories/28919 Vendor Advisory
http://www.f-secure.com/security/fsc-2008-1.shtml Patch
http://www.securitytracker.com/id?1019405
http://www.securitytracker.com/id?1019412
http://www.securitytracker.com/id?1019413
http://www.vupen.com/english/advisories/2008/0544/references Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/40480
Configurations

Configuration 1 (hide)

OR cpe:2.3:a:f-secure:f-secure_anti-virus:2006:*:*:*:*:*:*:*
cpe:2.3:a:f-secure:f-secure_anti-virus:2007:*:*:*:*:*:*:*
cpe:2.3:a:f-secure:f-secure_anti-virus:2007:second_edition:*:*:*:*:*:*
cpe:2.3:a:f-secure:f-secure_anti-virus:2008:*:*:*:*:*:*:*
cpe:2.3:a:f-secure:f-secure_anti-virus_client_security:6.03:*:*:*:*:*:*:*
cpe:2.3:a:f-secure:f-secure_anti-virus_client_security:6.04:*:*:*:*:*:*:*
cpe:2.3:a:f-secure:f-secure_anti-virus_client_security:7.01:*:*:*:*:*:*:*
cpe:2.3:a:f-secure:f-secure_anti-virus_client_security:7.10:*:*:*:*:*:*:*
cpe:2.3:a:f-secure:f-secure_anti-virus_for_linux:4.65:*:*:*:*:*:*:*
cpe:2.3:a:f-secure:f-secure_anti-virus_for_workstations:5.44:*:*:*:*:*:*:*
cpe:2.3:a:f-secure:f-secure_anti-virus_for_workstations:7.00:*:*:*:*:*:*:*
cpe:2.3:a:f-secure:f-secure_anti-virus_for_workstations:7.10:*:*:*:*:*:*:*
cpe:2.3:a:f-secure:f-secure_anti-virus_linux_client_security:5.52:*:*:*:*:*:*:*
cpe:2.3:a:f-secure:f-secure_anti-virus_linux_client_security:5.53:*:*:*:*:*:*:*
cpe:2.3:a:f-secure:f-secure_internet_security:2006:*:*:*:*:*:*:*
cpe:2.3:a:f-secure:f-secure_internet_security:2007:*:*:*:*:*:*:*
cpe:2.3:a:f-secure:f-secure_internet_security:2007:second_edition:*:*:*:*:*:*
cpe:2.3:a:f-secure:f-secure_internet_security:2008:*:*:*:*:*:*:*
cpe:2.3:a:f-secure:f-secure_protection_service_for_business:*:*:*:*:*:*:*:*
cpe:2.3:a:f-secure:f-secure_protection_service_for_consumers:*:*:*:*:*:*:*:*
History

21 Nov 2024, 00:42

Type Values Removed Values Added
References () http://secunia.com/advisories/28919 - Vendor Advisory () http://secunia.com/advisories/28919 - Vendor Advisory
References () http://www.f-secure.com/security/fsc-2008-1.shtml - Patch () http://www.f-secure.com/security/fsc-2008-1.shtml - Patch
References () http://www.securitytracker.com/id?1019405 - () http://www.securitytracker.com/id?1019405 -
References () http://www.securitytracker.com/id?1019412 - () http://www.securitytracker.com/id?1019412 -
References () http://www.securitytracker.com/id?1019413 - () http://www.securitytracker.com/id?1019413 -
References () http://www.vupen.com/english/advisories/2008/0544/references - Vendor Advisory () http://www.vupen.com/english/advisories/2008/0544/references - Vendor Advisory
References () https://exchange.xforce.ibmcloud.com/vulnerabilities/40480 - () https://exchange.xforce.ibmcloud.com/vulnerabilities/40480 -
Information

Published : 2008-02-15 02:00

Updated : 2024-11-21 00:42

NVD link : CVE-2008-0792

Mitre link : CVE-2008-0792

CVE.ORG link : CVE-2008-0792

JSON object : View

Products Affected

f-secure

  • f-secure_protection_service_for_business
  • f-secure_protection_service_for_consumers
  • f-secure_anti-virus_client_security
  • f-secure_anti-virus
  • f-secure_anti-virus_for_linux
  • f-secure_internet_security
  • f-secure_anti-virus_linux_client_security
  • f-secure_anti-virus_for_workstations
CWE
CWE-264

Permissions, Privileges, and Access Controls