CVE-2006-0338: F-Secure Anti-Virus

Medium severity, CVSS 5.0. EPSS: 3% chance of exploitation in the next 30 days.

Multiple F-Secure Anti-Virus products and versions for Windows and Linux, including Anti-Virus for Windows Servers 5.52 and earlier, Internet Security 2004, 2005 and 2006, and Anti-Virus for Linux Servers 4.64 and earlier, allow remote attackers to hide arbitrary files and data via malformed (1) RAR and (2) ZIP archives, which are not properly scanned.

Affected products

• F-Secure F-Secure Anti-Virus: version 4.51 only; version 4.52 only; version 4.60 only; version 4.61 only; version 4.62 only; version 4.64 only; …
• F-Secure F-Secure Internet Security: version 2004 only; version 2005 only; version 2006 only
• F-Secure F-Secure Personal Express: version 4.5 only; version 4.6 only; version 4.7 only; version 5.0 only
• F-Secure Internet Gatekeeper: version 2.06 only; version 2.14 only; version 6.32 only; version 6.41 only; version 6.42 only

Published 2006-01-21. Last modified 2026-06-16.