Vulnerability Intelligence Report
CVE-2006-0338
Multiple F-Secure Anti-Virus products and versions for Windows and Linux, including Anti-Virus for Windows Servers 5.52 and earlier, Internet Security 2004, 2005 and 2006, and Anti-Virus for Linux Servers 4.64 and earlier, allow remote attackers to hide arbitrary files and data via malformed (1) RAR and (2) ZIP archives, which are not properly scanned.
No Active Exploit Signals
CVSS Base Score
5.0
MEDIUM
EPSS Probability:2.99%
Executive Threat Verdict
Evaluating...
Evaluating Threat Landscape...
Assessing known weaponization, exploitation telemetry, and federal advisories.
Attack Surface
—
Authentication
—
Weaponization
—
SSVC Action
—
Affected Products & Versions
| Vendor | Product | Affected Versions |
|---|---|---|
| f-secure | f-secure_anti-virus | 4.51, 4.52, 4.60, 4.61, 4.62, 4.64, 5.0, 5.5, 5.11, 5.41, 5.42, 5.43, 5.44, 5.52, 5.55, 6.01, 6.2, 6.21, 6.30, 6.30_sr1, 6.31, 6.40, 2003, 2004, 2005 |
| f-secure | f-secure_internet_security | 2004, 2005, 2006 |
| f-secure | f-secure_personal_express | 4.5, 4.6, 4.7, 5.0 |
| f-secure | internet_gatekeeper | 2.06, 2.14, 6.32, 6.41, 6.42 |
References & Technical Advisories
No reference links found.
Threat Intelligence Signals
EPSS Score
2.992%
GitHub Advisory
Identity & Timeline
| Status | PUBLISHED |
| Assigning Authority | MITRE Corporation · N/A · USA |
| Reserved | 2006-01-20T00:00:00 |
| Published | 2006-01-21T00:00:00 |
| Patch Date | 2006-01-19 |
| Last Updated | 2024-08-07T16:34:14 |
Community Chatter & Buzz