CVE-2006-3489

Severity: medium (CVSS 5.0 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 1.6% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2006-07-10 · updated 2026-06-16

Description

F-Secure Anti-Virus 2003 through 2006 and other versions, Internet Security 2003 through 2006, and Service Platform for Service Providers 6.x and earlier allows remote attackers to bypass anti-virus scanning via a crafted filename.

Affected products

F-Secure Anti-Virus: through 5.44; through 5.52; through 5.61; through 6.01; 5.5, 5.51, 5.52, 2003, 2004, 2005 (+1)
F-Secure Internet Security: 2003, 2004, 2005, 2006
F-Secure Service Platform For Service Providers: all versions

References

http://secunia.com/advisories/20858
http://securitytracker.com/id?1016400
http://securitytracker.com/id?1016401
http://www.f-secure.com/security/fsc-2006-4.shtml
http://www.osvdb.org/26875
http://www.securityfocus.com/bid/18693
http://www.vupen.com/english/advisories/2006/2573
https://exchange.xforce.ibmcloud.com/vulnerabilities/27498
http://secunia.com/advisories/20858
http://securitytracker.com/id?1016400
http://securitytracker.com/id?1016401
http://www.f-secure.com/security/fsc-2006-4.shtml

Get alerted when CVE-2006-3489 or the next vulnerability affects your stack