CVE-2008-1412

Severity: medium (CVSS 6.8 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 3.6% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2008-03-20 · updated 2026-06-16
Weakness: CWE-20

Description

Unspecified vulnerability in multiple F-Secure anti-virus products, including Internet Security 2006 through 2008, Anti-Virus 2006 through 2008, and others, allows remote attackers to execute arbitrary code or cause a denial of service (hang or crash) via a malformed archive that triggers an unhandled exception, as demonstrated by the PROTOS GENOME test suite for Archive Formats.

Affected products

F-Secure Anti-Virus: 2006, 2007, 2007-second_edition, 2008
F-Secure Anti-Virus Client Security: through 6.04
F-Secure Anti-Virus For Linux: through 4.65
F-Secure Anti-Virus For Workstations: through 7.11
F-Secure Anti-Virus Linux Client Security: through 5.54
F-Secure Client Security: through 7.11
F-Secure Internet Security: 2006, 2007, 2007-second_edition, 2008
F-Secure Mobile Antivirus For S60: 2nd_edition
F-Secure Mobile Antivirus For Windows Mobile: 5.0, 6, 2003
F-Secure Mobile Security For Series 80: all versions
F-Secure Protection Service For Business: through 3.10
F-Secure Protection Service For Consumers: through 7.00

References

Get alerted when CVE-2008-1412 or the next vulnerability affects your stack