CVE-2006-0337: F-Secure Anti-Virus

High severity, CVSS 7.5. EPSS: 5.8% chance of exploitation in the next 30 days.

Buffer overflow in multiple F-Secure Anti-Virus products and versions for Windows and Linux, including Anti-Virus for Windows Servers 5.52 and earlier, Internet Security 2004, 2005 and 2006, and Anti-Virus for Linux Servers 4.64 and earlier, allows remote attackers to execute arbitrary code via crafted ZIP archives.

Affected products

• F-Secure F-Secure Anti-Virus: version 2.16 only; version 4.51 only; version 4.52 only; version 4.61 only; version 4.62 only; version 4.64 only; …
• F-Secure F-Secure Internet Security: version 2004 only; version 2005 only; version 2006 only
• F-Secure Internet Gatekeeper: version 2.06 only; version 2.6 only; version 2.14 only; version 6.3 only; version 6.4 only; version 6.31 only; …
• F-Secure Solutions Based On F-Secure Personal Express: version 6.20 only

Published 2006-01-21. Last modified 2026-06-16.