CVE-2004-2405

Severity: medium (CVSS 6.4 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 1.7% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2004-12-31 · updated 2026-06-16

Description

Buffer overflow in multiple F-Secure Anti-Virus products, including F-Secure Anti-Virus 5.42 and earlier, allows remote attackers to bypass scanning or cause a denial of service (crash or module restart), depending on the product, via a malformed LHA archive.

Affected products

F-Secure Anti-Virus: through 4.52; through 5.42; through 5.52; through 6.21; through 2004; 4.60
F-Secure For Firewalls: through 6.20
F-Secure Internet Security: through 2004
F-Secure Internet Gatekeeper: through 6.32

References

http://secunia.com/advisories/11712
http://www.f-secure.com/security/fsc-2004-1.shtml
https://exchange.xforce.ibmcloud.com/vulnerabilities/16258
http://secunia.com/advisories/11712
http://www.f-secure.com/security/fsc-2004-1.shtml
https://exchange.xforce.ibmcloud.com/vulnerabilities/16258

Get alerted when CVE-2004-2405 or the next vulnerability affects your stack