CVE-2008-6085 : Detail

CVE-2008-6085

10.47%V4
2009-02-06
11h00 +00:00
Network
2024-08-07
11h20 +00:00
Notifikasi untuk CVE tertentu
Tetap terinformasi tentang perubahan untuk CVE tertentu.
Kelola notifikasi

Deskripsi CVE

Integer overflow in multiple F-Secure anti-virus products, including Internet Security 2006 through 2008, Anti-Virus 2006 through 2008, and others, when configured to scan inside compressed archives, allows remote attackers to execute arbitrary code via a crafted RPM compressed archive file, which triggers a buffer overflow.

Informasi CVE

Kelemahan Terkait

CWE-ID Nama Kelemahan Sumber
CWE-189 Category : Numeric Errors
Weaknesses in this category are related to improper calculation or conversion of numbers.

Metrik

Metrik Skor Tingkat keparahan CVSS Vektor Sumber
V2 7.6 AV:N/AC:H/Au:N/C:C/I:C/A:C nvd@nist.gov

EPSS

EPSS adalah model penilaian yang memprediksi kemungkinan suatu kerentanan dieksploitasi.

Skor EPSS

Model EPSS menghasilkan skor probabilitas antara 0 dan 1 (0 hingga 100%). Semakin tinggi skor, semakin besar probabilitas bahwa suatu kerentanan akan dieksploitasi.

Persentil EPSS

Persentil digunakan untuk meranking CVE berdasarkan skor EPSS mereka. Misalnya, CVE di persentil ke-95 berdasarkan skor EPSS-nya lebih mungkin dieksploitasi daripada 95% CVE lainnya. Dengan demikian, persentil digunakan untuk membandingkan skor EPSS suatu CVE dengan CVE lainnya.

Produk yang Disebutkan

Konfigurasi 0

F-secure>>F-secure_anti-virus >> Version 7.02

F-secure>>F-secure_anti-virus >> Version 2006

F-secure>>F-secure_anti-virus >> Version 2007

F-secure>>F-secure_anti-virus >> Version 2007

F-secure>>F-secure_anti-virus >> Version 2008

F-secure>>F-secure_anti-virus >> Version 2009

F-secure>>F-secure_anti-virus_for_citrix_servers >> Version Hingga (termasuk) 7.00

F-secure>>F-secure_anti-virus_for_microsoft_exchange >> Version Hingga (termasuk) 7.10

F-secure>>F-secure_anti-virus_for_microsoft_exchange >> Version 6.62

F-secure>>F-secure_anti-virus_for_microsoft_exchange >> Version 7.00

F-secure>>F-secure_anti-virus_for_mimesweeper >> Version Hingga (termasuk) 5.61

F-secure>>F-secure_anti-virus_for_windows_servers >> Version Hingga (termasuk) 8.00

F-secure>>F-secure_anti-virus_for_workstations >> Version 7.10

F-secure>>F-secure_anti-virus_for_workstations >> Version 7.11

F-secure>>F-secure_anti-virus_linux_client_security >> Version Hingga (termasuk) 5.54

F-secure>>F-secure_anti-virus_linux_client_security >> Version 5.30

F-secure>>F-secure_anti-virus_linux_client_security >> Version 5.52

F-secure>>F-secure_anti-virus_linux_client_security >> Version 5.53

F-secure>>F-secure_anti-virus_linux_server_security >> Version Hingga (termasuk) 5.54

F-secure>>F-secure_anti-virus_linux_server_security >> Version 5.30

F-secure>>F-secure_anti-virus_linux_server_security >> Version 5.52

F-secure>>F-secure_client_security >> Version Hingga (termasuk) 7.12

F-secure>>F-secure_client_security >> Version 7.11

F-secure>>F-secure_home_server_security >> Version 2009

F-secure>>F-secure_internet_gatekeeper_for_linux >> Version Hingga (termasuk) 2.16

F-secure>>F-secure_internet_gatekeeper_for_windows >> Version Hingga (termasuk) 6.61

F-secure>>F-secure_internet_security >> Version 7.02

F-secure>>F-secure_internet_security >> Version 2006

F-secure>>F-secure_internet_security >> Version 2007

F-secure>>F-secure_internet_security >> Version 2007

F-secure>>F-secure_internet_security >> Version 2008

F-secure>>F-secure_internet_security >> Version 2009

F-secure>>F-secure_linux_security >> Version Hingga (termasuk) 7.01

F-secure>>F-secure_messaging_security_gateway >> Version Hingga (termasuk) 5.0.4

F-secure>>F-secure_messaging_security_gateway >> Version 4.0.7

F-secure>>F-secure_protection_service_for_business >> Version Hingga (termasuk) 3.10

F-secure>>F-secure_protection_service_for_business >> Version 3.00

F-secure>>F-secure_protection_service_for_consumers >> Version Hingga (termasuk) 8.00

F-secure>>F-secure_protection_service_for_consumers >> Version 5.00

F-secure>>F-secure_protection_service_for_consumers >> Version 6.00

F-secure>>F-secure_protection_service_for_consumers >> Version 7.00

Referensi

http://www.securityfocus.com/bid/31846
Tags : vdb-entry, x_refsource_BID
http://www.securitytracker.com/id?1021073
Tags : vdb-entry, x_refsource_SECTRACK
http://secunia.com/advisories/32352
Tags : third-party-advisory, x_refsource_SECUNIA
http://www.vupen.com/english/advisories/2008/2874
Tags : vdb-entry, x_refsource_VUPEN