F-Secure Multiple Products Multiple Remote Archive Handling Vulnerabilities
BID:28282
Info
F-Secure Multiple Products Multiple Remote Archive Handling Vulnerabilities
| Bugtraq ID: | 28282 |
| Class: | Unknown |
| CVE: |
CVE-2008-1412 |
| Remote: | Yes |
| Local: | No |
| Published: | Mar 17 2008 12:00AM |
| Updated: | May 07 2015 05:32PM |
| Credit: | The vendor credits the University of Oulu for discovering these issues. |
| Vulnerable: |
F-Secure Protection Service for Consumers 7.00 F-Secure Protection Service for Consumers 0 F-Secure Protection Service for Business 3.10 F-Secure Protection Service for Business 0 F-Secure Mobile Security for Series 80 0 F-Secure Mobile Anti-Virus for Windows Mobile 2003/5.0/6 0 F-Secure Mobile Anti-Virus for S60 2nd Edition 0 F-Secure Messaging Security Gateway 4.0.7 F-Secure Messaging Security Gateway 4.0.6 F-Secure Internet Security 2007 0 F-secure Internet Security 2006 0 F-Secure Internet Security 2008 F-Secure Internet Security 2007 Second Edition F-Secure Internet Gatekeeper for Linux 2.15.484 F-Secure Internet Gatekeeper for Linux 2.14 F-Secure Internet Gatekeeper for Linux 2.0 6 F-Secure Internet Gatekeeper for Linux 2.16 F-Secure Internet Gatekeeper for Linux F-Secure Internet Gatekeeper 6.42 F-Secure Internet Gatekeeper 6.41 F-Secure Internet Gatekeeper 6.40 0 F-Secure Internet Gatekeeper 6.32 F-Secure Internet Gatekeeper 6.31 F-Secure Internet Gatekeeper 6.3 F-Secure Internet Gatekeeper 6.61 F-Secure Internet Gatekeeper 6.60 F-Secure Internet Gatekeeper 6.50 F-Secure Client Security 7.11 F-Secure Client Security 0 F-secure Anti-Virus Linux Client Security 5.11 F-secure Anti-Virus Linux Client Security 5.0.4 F-secure Anti-Virus Linux Client Security 5.0 1 F-secure Anti-Virus Linux Client Security 5.0 F-secure Anti-Virus Linux Client Security 5.54 F-secure Anti-Virus Linux Client Security 5.52 F-secure Anti-Virus Linux Client Security 5.30 F-Secure Anti-Virus for Workstations 5.44 F-Secure Anti-Virus for Workstations 5.43 F-Secure Anti-Virus for Workstations 5.42 F-Secure Anti-Virus for Workstations 5.41 F-Secure Anti-Virus for Workstations 5.40 F-Secure Anti-Virus for Workstations 7.11 F-Secure Anti-Virus for Workstations 7.00 F-Secure Anti-Virus for MS Exchange 6.40 F-Secure Anti-Virus for MS Exchange 6.31 F-Secure Anti-Virus for MS Exchange 6.30 Service Release 1 F-Secure Anti-Virus for MS Exchange 6.21 F-Secure Anti-Virus for MS Exchange 6.3 0 F-Secure Anti-Virus for MS Exchange 6.2 F-Secure Anti-Virus for MS Exchange 6.0 1 F-Secure Anti-Virus for MS Exchange 7.10 F-Secure Anti-Virus for MS Exchange 7.00 F-Secure Anti-Virus for MS Exchange 6.62 F-Secure Anti-Virus for MS Exchange 6.61 F-Secure Anti-Virus for MS Exchange 6.60 F-Secure Anti-Virus for MIMEsweeper 5.61 F-Secure Anti-Virus for MIMEsweeper 5.51 F-Secure Anti-Virus for MIMEsweeper 5.50 F-Secure Anti-Virus for MIMEsweeper 5.42 F-Secure Anti-Virus for MIMEsweeper 5.41 F-Secure Anti-Virus for Linux Servers 4.65 F-Secure Anti-Virus for Linux Servers 4.64 F-Secure Anti-Virus for Linux Servers 4.61 F-Secure Anti-Virus for Linux Servers 4.52 F-Secure Anti-Virus for Linux Servers 4.51 F-Secure Anti-Virus for Linux Servers 4.65 F-Secure Anti-Virus for Linux Gateways 4.65 F-Secure Anti-Virus for Linux Gateways 4.64 F-Secure Anti-Virus for Linux Gateways 4.61 F-Secure Anti-Virus for Linux Gateways 4.52 F-Secure Anti-Virus for Linux Gateways 4.51 F-Secure Anti-Virus for Linux Gateways 2.16 F-Secure Anti-Virus for Linux Gateways 4.65 F-Secure Anti-Virus for Linux Gateways F-Secure Anti-Virus For Linux 4.52 F-Secure Anti-Virus For Linux 4.5 F-Secure Anti-Virus for Citrix Servers 5.52 F-Secure Anti-Virus for Citrix Servers 5.5 F-Secure Anti-Virus for Citrix Servers 7.00 F-Secure Anti-Virus Client Security 6.0 1 F-Secure Anti-Virus Client Security 5.55 F-Secure Anti-Virus Client Security 5.54 F-Secure Anti-Virus Client Security 5.52 F-Secure Anti-Virus Client Security 5.50 F-Secure Anti-Virus Client Security 7.11 F-Secure Anti-Virus Client Security 6.04 F-Secure Anti-Virus Client Security 6.03 F-Secure Anti-Virus Client Security 6.02 F-Secure Anti-Virus 2006 0 F-Secure Anti-Virus 2008 F-Secure Anti-Virus 2007 Second Edition F-Secure Anti-Virus 2007 |
| Not Vulnerable: | |
Discussion
F-Secure Multiple Products Multiple Remote Archive Handling Vulnerabilities
Multiple F-Secure products are prone to multiple remote archive-handling vulnerabilities because the applications fails to properly handle malformed archive files.
Successfully exploiting these issues allows remote attackers to trigger unhandled exceptions. Various unspecified effects (potentially including denial of service or remote code execution) are possible.
Multiple F-Secure products are prone to multiple remote archive-handling vulnerabilities because the applications fails to properly handle malformed archive files.
Successfully exploiting these issues allows remote attackers to trigger unhandled exceptions. Various unspecified effects (potentially including denial of service or remote code execution) are possible.
Exploit / POC
F-Secure Multiple Products Multiple Remote Archive Handling Vulnerabilities
The Oulu University Secure Programming Group (OUSPG) in Finland created archive files designed to trigger these issues. The archive files may be obtained from the following URI:
http://www.ee.oulu.fi/research/ouspg/protos/testing/c10/archive/
The Oulu University Secure Programming Group (OUSPG) in Finland created archive files designed to trigger these issues. The archive files may be obtained from the following URI:
http://www.ee.oulu.fi/research/ouspg/protos/testing/c10/archive/
Solution / Fix
F-Secure Multiple Products Multiple Remote Archive Handling Vulnerabilities
Solution:
The vendor has released an advisory along with fixes. Please see the references for information on obtaining and applying fixes.
Solution:
The vendor has released an advisory along with fixes. Please see the references for information on obtaining and applying fixes.
References
F-Secure Multiple Products Multiple Remote Archive Handling Vulnerabilities
References:
References:
- Client Security Home Page (F-Secure)
- F-Secure Anti-Virus Client Security Hotfixes (F-Secure)
- F-Secure Anti-Virus For Linux Homepage (F-Secure)
- F-Secure Anti-Virus for MIMESweeper hotfixes (F-Secure)
- PROTOS Genome Test Suite c10-archive (Oulu University)
- 20469: CERT-FI and CPNI Joint Vulnerability Advisory on Archive Formats (CERT-FI)
- F-Secure Security Bulletin FSC-2008-2 Archive handling vulnerability (F-Secure)