Description
Integer overflow in multiple F-Secure anti-virus products, including Internet Security 2006 through 2008, Anti-Virus 2006 through 2008, and others, when configured to scan inside compressed archives, allows remote attackers to execute arbitrary code via a crafted RPM compressed archive file, which triggers a buffer overflow.
References
- 31846 vdb-entry
- 1021073 vdb-entry
- http://www.f-secure.com/security/fsc-2008-3.shtml
- 32352 third-party-advisory
- ADV-2008-2874 vdb-entry
- fsecure-multipleproducts-rpm-bo(46016) vdb-entry