CVE-2007-2966

2007-05-3123:30:00

CWE-119

[email protected]

web.nvd.nist.gov

f-secure

anti-virus

buffer overflow

remote attackers

lha archive

cve-2007-2966

7.7 High

AI Score

Confidence

Low

7.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.169 Low

EPSS

Percentile

96.0%

JSON

Buffer overflow in the LHA decompression component in F-Secure anti-virus products for Microsoft Windows and Linux before 20070529 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted LHA archive, related to an integer wrap, a similar issue to CVE-2006-4335.

CPENameOperatorVersion
f-secure:f-secure_anti-virusf-secure f-secure anti-virusle5.61
f-secure:internet_gatekeeperf-secure internet gatekeeperle2.16
f-secure:f-secure_anti-virusf-secure f-secure anti-viruseq2006
f-secure:f-secure_anti-virus_linux_client_securityf-secure f-secure anti-virus linux client securityle5.30
f-secure:f-secure_anti-virusf-secure f-secure anti-virusle5.52
f-secure:f-secure_anti-virusf-secure f-secure anti-viruseq2005
f-secure:f-secure_anti-virus_client_securityf-secure f-secure anti-virus client securityle6.03
f-secure:f-secure_protection_servicef-secure f-secure protection servicele6.40
f-secure:f-secure_anti-virusf-secure f-secure anti-virusle4.65
f-secure:f-secure_anti-virusf-secure f-secure anti-virusle5.42

CPE	Name	Operator	Version
f-secure:f-secure_anti-virus	f-secure f-secure anti-virus	le	5.61
f-secure:internet_gatekeeper	f-secure internet gatekeeper	le	2.16
f-secure:f-secure_anti-virus	f-secure f-secure anti-virus	eq	2006
f-secure:f-secure_anti-virus_linux_client_security	f-secure f-secure anti-virus linux client security	le	5.30
f-secure:f-secure_anti-virus	f-secure f-secure anti-virus	le	5.52
f-secure:f-secure_anti-virus	f-secure f-secure anti-virus	eq	2005
f-secure:f-secure_anti-virus_client_security	f-secure f-secure anti-virus client security	le	6.03
f-secure:f-secure_protection_service	f-secure f-secure protection service	le	6.40
f-secure:f-secure_anti-virus	f-secure f-secure anti-virus	le	4.65
f-secure:f-secure_anti-virus	f-secure f-secure anti-virus	le	5.42