Unscored severity · published Jan 21, 2006
CVE-2006-0338
Multiple F-Secure Anti-Virus products and versions for Windows and Linux, including Anti-Virus for Windows Servers 5.52 and earlier, Internet Security 2004, 2005 and 2006, and…
–
CVSS
3%
EPSS
No
On KEV
Description
Multiple F-Secure Anti-Virus products and versions for Windows and Linux, including Anti-Virus for Windows Servers 5.52 and earlier, Internet Security 2004, 2005 and 2006, and Anti-Virus for Linux Servers 4.64 and earlier, allow remote attackers to hide arbitrary files and data via malformed (1) RAR and (2) ZIP archives, which are not properly scanned.
Exploitation
Is it being used?
Exploit prediction (EPSS)3.0% · higher than 87% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
FA
F-secure Anti-virus · F-secure
4.51; 4.51; 4.52; 4.52; 4.52; 4.60; +34 more · source: NVD
FI
F-secure Internet Security · F-secure
2004; 2005; 2006 · source: NVD
FP
F-secure Personal Express · F-secure
4.5; 4.6; 4.7; 5.0 · source: NVD
IG
Internet Gatekeeper · F-secure
2.06; 2.14; 6.32; 6.41; 6.42 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2006-0338
CVE.org
https://www.cve.org/CVERecord?id=CVE-2006-0338
Patch
http://secunia.com/advisories/18529
securitytracker.com
http://securitytracker.com/id?1015507
securitytracker.com
http://securitytracker.com/id?1015508
securitytracker.com
http://securitytracker.com/id?1015509
securitytracker.com
http://securitytracker.com/id?1015510
www.ciac.org
http://www.ciac.org/ciac/bulletins/q-103.shtml
More from F-secure Anti-virus
–
CVE-2012-1463
The ELF file parser in AhnLab V3 Internet Security 2011.01.18.00, Bitdefender 7.2, Quick Heal (aka Cat QuickHeal) 11.00, Command Antivirus 5.2.11.5, Comodo Antivirus 7424, eSafe…
–
CVE-2012-1461
The Gzip file parser in AVG Anti-Virus 10.0.0.1190, Bitdefender 7.2, Command Antivirus 5.2.11.5, Emsisoft Anti-Malware 5.1.0.1, F-Secure Anti-Virus 9.0.16160.0, Fortinet Antivirus…
–
CVE-2012-1459
The TAR file parser in AhnLab V3 Internet Security 2011.01.18.00, Avira AntiVir 7.11.1.163, Antiy Labs AVL SDK 2.0.3.7, avast! Antivirus 4.8.1351.0 and 5.0.677.0, AVG Anti-Virus…
–
CVE-2012-1443
The RAR file parser in ClamAV 0.96.4, Rising Antivirus 22.83.00.03, Quick Heal (aka Cat QuickHeal) 11.00, G Data AntiVirus 21, AVEngine 20101.3.0.103 in Symantec Endpoint…
–
CVE-2012-1442
The ELF file parser in Quick Heal (aka Cat QuickHeal) 11.00, McAfee Anti-Virus Scanning Engine 5.400.0.1158, McAfee Gateway (formerly Webwasher) 2010.1C, eSafe 7.0.17.0, Kaspersky…