Description
Multiple F-Secure Anti-Virus products and versions for Windows and Linux, including Anti-Virus for Windows Servers 5.52 and earlier, Internet Security 2004, 2005 and 2006, and Anti-Virus for Linux Servers 4.64 and earlier, allow remote attackers to hide arbitrary files and data via malformed (1) RAR and (2) ZIP archives, which are not properly scanned.
References
- http://www.f-secure.com/security/fsc-2006-1.shtml
- fsecure-rar-zip-scan-bypass(24199) vdb-entry
- 1015510 vdb-entry
- 18529 third-party-advisory
- 22633 vdb-entry
- 1015509 vdb-entry
- 16309 vdb-entry
- Q-103 third-party-advisory government-resource
- 1015508 vdb-entry
- 1015507 vdb-entry
- ADV-2006-0257 vdb-entry