What’s Vulnerable › Vulnerabilities

CVE-2008-0792

• Severity: medium (CVSS 5.8 v2.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 2.2% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2008-02-15 · updated 2026-06-16
• Weakness: CWE-264

Description

Multiple F-Secure anti-virus products, including Internet Security 2006 through 2008, Anti-Virus 2006 through 2008, F-Secure Protection Service, and others, allow remote attackers to bypass malware detection via a crafted CAB archive.

Affected products

• F-Secure Anti-Virus: 2006, 2007, 2007-second_edition, 2008
• F-Secure Anti-Virus Client Security: 6.03, 6.04, 7.01, 7.10
• F-Secure Anti-Virus For Linux: 4.65
• F-Secure Anti-Virus For Workstations: 5.44, 7.00, 7.10
• F-Secure Anti-Virus Linux Client Security: 5.52, 5.53
• F-Secure Internet Security: 2006, 2007, 2007-second_edition, 2008
• F-Secure Protection Service For Business: through 3.00
• F-Secure Protection Service For Consumers: through 7.00

References

• http://secunia.com/advisories/28919
• http://www.f-secure.com/security/fsc-2008-1.shtml
• http://www.securitytracker.com/id?1019405
• http://www.securitytracker.com/id?1019412
• http://www.securitytracker.com/id?1019413
• http://www.vupen.com/english/advisories/2008/0544/references
• https://exchange.xforce.ibmcloud.com/vulnerabilities/40480
• http://secunia.com/advisories/28919
• http://www.f-secure.com/security/fsc-2008-1.shtml
• http://www.securitytracker.com/id?1019405
• http://www.securitytracker.com/id?1019412
• http://www.securitytracker.com/id?1019413

Get alerted when CVE-2008-0792 or the next vulnerability affects your stack