F-Secure Multiple Archive Handling Vulnerabilities

Bugtraq ID:	16309
Class:	Unknown
CVE:
Remote:	Yes
Local:	No
Published:	Jan 19 2006 12:00AM
Updated:	Feb 07 2006 08:54PM
Credit:	Thierry Zoller is credited with the discovery of these issues.
Vulnerable:	F-Secure Solutions based on F-Secure Personal Express 6.20 F-secure Internet Security 2006 0 F-Secure Internet Security 2005 F-Secure Internet Security 2004 F-Secure Internet Gatekeeper for Linux 2.14 F-Secure Internet Gatekeeper for Linux 2.6 F-Secure Internet Gatekeeper for Linux 2.0 6 F-Secure Internet Gatekeeper 6.42 F-Secure Internet Gatekeeper 6.41 F-Secure Internet Gatekeeper 6.40 0 F-Secure Internet Gatekeeper 6.32 F-Secure Internet Gatekeeper 6.31 F-Secure Internet Gatekeeper 6.3 F-Secure Anti-Virus Linux Server Security 5.11 F-Secure Anti-Virus Linux Server Security 5.0 1 F-Secure Anti-Virus Linux Server Security 5.0 F-secure Anti-Virus Linux Client Security 5.11 F-secure Anti-Virus Linux Client Security 5.0 1 F-secure Anti-Virus Linux Client Security 5.0 F-Secure Anti-Virus for Workstations 5.44 F-Secure Anti-Virus for Workstations 5.43 F-Secure Anti-Virus for Workstations 5.42 F-Secure Anti-Virus for Workstations 5.41 F-Secure Anti-Virus for Workstations 5.40 F-Secure Anti-Virus for Windows Servers 5.52 F-Secure Anti-Virus for Windows Servers 5.50 F-Secure Anti-Virus for Windows Servers 5.42 F-Secure Anti-Virus for Windows Servers 5.41 F-Secure Anti-Virus for Samba Servers 4.62 F-Secure Anti-Virus for MS Exchange 6.40 F-Secure Anti-Virus for MS Exchange 6.31 F-Secure Anti-Virus for MS Exchange 6.31 F-Secure Anti-Virus for MS Exchange 6.30 Service Release 1 F-Secure Anti-Virus for MS Exchange 6.21 F-Secure Anti-Virus for MS Exchange 6.3 0 F-Secure Anti-Virus for MS Exchange 6.2 F-Secure Anti-Virus for MS Exchange 6.0 1 F-Secure Anti-Virus for MIMEsweeper 5.61 F-Secure Anti-Virus for MIMEsweeper 5.51 F-Secure Anti-Virus for MIMEsweeper 5.50 F-Secure Anti-Virus for MIMEsweeper 5.42 F-Secure Anti-Virus for MIMEsweeper 5.41 F-Secure Anti-Virus for Linux Workstations 4.52 F-Secure Anti-Virus for Linux Workstations 4.51 F-Secure Anti-Virus for Linux Servers 4.64 F-Secure Anti-Virus for Linux Servers 4.61 F-Secure Anti-Virus for Linux Servers 4.52 F-Secure Anti-Virus for Linux Servers 4.51 F-Secure Anti-Virus for Linux Gateways 4.64 F-Secure Anti-Virus for Linux Gateways 4.61 F-Secure Anti-Virus for Linux Gateways 4.52 F-Secure Anti-Virus for Linux Gateways 4.51 F-Secure Anti-Virus for Linux Gateways 2.16 F-Secure Anti-Virus for Firewalls 6.20 F-Secure Anti-Virus for Citrix Servers 5.52 F-Secure Anti-Virus for Citrix Servers 5.5 F-Secure Anti-Virus Client Security 6.0 1 F-Secure Anti-Virus Client Security 5.55 F-Secure Anti-Virus Client Security 5.54 F-Secure Anti-Virus Client Security 5.52 F-Secure Anti-Virus Client Security 5.50 F-Secure Anti-Virus 2006 0 F-secure Anti-Virus 2005 F-Secure Anti-Virus 2004
Not Vulnerable:

F-Secure Multiple Archive Handling Vulnerabilities

F-Secure is prone to multiple vulnerabilities when handling archives of various formats.

The application is affected by a remote buffer overflow vulnerability when handling malformed ZIP archives. A successful attack can facilitate arbitrary code execution and result in a full compromise.

Specially crafted ZIP and RAR archives can also bypass detection. This may result in arbitrary code execution or a malicious code infection.

F-Secure Multiple Archive Handling Vulnerabilities

Currently we are not aware of any exploits for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.

F-Secure Multiple Archive Handling Vulnerabilities

Solution:
The vendor has released patches to address these issues. Please see the referenced F-Secure advisory for more information.

F-Secure Multiple Archive Handling Vulnerabilities

References:

• F-Secure Homepage (F-Secure)
  
• F-Secure Security Bulletin FSC-2006-1 (F-Secure)