CVE-2008-6085

Severity: high (CVSS 7.6 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 5.5% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2009-02-06 · updated 2026-06-16
Weakness: CWE-189

Description

Integer overflow in multiple F-Secure anti-virus products, including Internet Security 2006 through 2008, Anti-Virus 2006 through 2008, and others, when configured to scan inside compressed archives, allows remote attackers to execute arbitrary code via a crafted RPM compressed archive file, which triggers a buffer overflow.

Affected products

F-Secure Anti-Virus: 7.02, 2006, 2007, 2008, 2009
F-Secure Anti-Virus For Citrix Servers: through 7.00
F-Secure Anti-Virus For Microsoft Exchange: through 7.10; 6.62, 7.00
F-Secure Anti-Virus For Mimesweeper: through 5.61
F-Secure Anti-Virus For Windows Servers: through 8.00
F-Secure Anti-Virus For Workstations: 7.10, 7.11
F-Secure Anti-Virus Linux Client Security: through 5.54; 5.30, 5.52, 5.53
F-Secure Anti-Virus Linux Server Security: through 5.54; 5.30, 5.52
F-Secure Client Security: through 7.12; 7.11
F-Secure Home Server Security: 2009
F-Secure Internet Gatekeeper For Linux: through 2.16
F-Secure Internet Gatekeeper For Windows: through 6.61
F-Secure Internet Security: 7.02, 2006, 2007, 2008, 2009
F-Secure Linux Security: through 7.01
F-Secure Messaging Security Gateway: through 5.0.4; 4.0.7
F-Secure Protection Service For Business: through 3.10; 3.00
F-Secure Protection Service For Consumers: through 8.00; 5.00, 6.00, 7.00

References

Get alerted when CVE-2008-6085 or the next vulnerability affects your stack