6.4

CVE-2004-2405

Buffer overflow in multiple F-Secure Anti-Virus products, including F-Secure Anti-Virus 5.42 and earlier, allows remote attackers to bypass scanning or cause a denial of service (crash or module restart), depending on the product, via a malformed LHA archive.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
F-secure ≫ F-secure Anti-virus Edition linux Version <= 4.52
F-secure ≫ F-secure Anti-virus Edition mimesweeper Version <= 5.42
F-secure ≫ F-secure Anti-virus Edition windows_servers Version <= 5.42
F-secure ≫ F-secure Anti-virus Edition workstations Version <= 5.42
F-secure ≫ F-secure Anti-virus Edition client_security Version <= 5.52
F-secure ≫ F-secure Anti-virus Edition ms_exchange Version <= 6.21
F-secure ≫ F-secure Anti-virus Version <= 2004
F-secure ≫ F-secure Anti-virus Version 4.60 Edition samba_servers
F-secure ≫ F-secure For Firewalls Version <= 6.20
F-secure ≫ Internet Gatekeeper Version <= 6.32
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 1.72% 0.744
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 6.4 10 4.9
AV:N/AC:L/Au:N/C:N/I:P/A:P
Es wurden noch keine Informationen zu CWE veröffentlicht.
http://secunia.com/advisories/11712
Patch
Vendor Advisory
http://www.f-secure.com/security/fsc-2004-1.shtml
Patch
Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/16258