CVE-2004-2405: F-Secure Anti-Virus

Medium severity, CVSS 6.4. EPSS: 1.7% chance of exploitation in the next 30 days.

Buffer overflow in multiple F-Secure Anti-Virus products, including F-Secure Anti-Virus 5.42 and earlier, allows remote attackers to bypass scanning or cause a denial of service (crash or module restart), depending on the product, via a malformed LHA archive.

Affected products

• F-Secure F-Secure Anti-Virus: up to and including 4.52; up to and including 5.42; up to and including 5.52; up to and including 6.21; up to and including 2004; version 4.60 only
• F-Secure F-Secure For Firewalls: up to and including 6.20
• F-Secure F-Secure Internet Security: up to and including 2004
• F-Secure Internet Gatekeeper: up to and including 6.32

Published 2004-12-31. Last modified 2026-06-16.