CVE-2006-0338

Severity: medium (CVSS 5.0 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 3.0% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2006-01-21 · updated 2026-06-16

Description

Multiple F-Secure Anti-Virus products and versions for Windows and Linux, including Anti-Virus for Windows Servers 5.52 and earlier, Internet Security 2004, 2005 and 2006, and Anti-Virus for Linux Servers 4.64 and earlier, allow remote attackers to hide arbitrary files and data via malformed (1) RAR and (2) ZIP archives, which are not properly scanned.

Affected products

F-Secure Anti-Virus: 4.51, 4.52, 4.60, 4.61, 4.62, 4.64 (+19)
F-Secure Internet Security: 2004, 2005, 2006
F-Secure Personal Express: 4.5, 4.6, 4.7, 5.0
F-Secure Internet Gatekeeper: 2.06, 2.14, 6.32, 6.41, 6.42

References

http://secunia.com/advisories/18529
http://securitytracker.com/id?1015507
http://securitytracker.com/id?1015508
http://securitytracker.com/id?1015509
http://securitytracker.com/id?1015510
http://www.ciac.org/ciac/bulletins/q-103.shtml
http://www.f-secure.com/security/fsc-2006-1.shtml
http://www.osvdb.org/22633
http://www.securityfocus.com/bid/16309
http://www.vupen.com/english/advisories/2006/0257
https://exchange.xforce.ibmcloud.com/vulnerabilities/24199
http://secunia.com/advisories/18529

Get alerted when CVE-2006-0338 or the next vulnerability affects your stack