CVE-2006-2838: F-Secure Anti-Virus

High severity, CVSS 7.6. EPSS: 5.7% chance of exploitation in the next 30 days.

Buffer overflow in the web console in F-Secure Anti-Virus for Microsoft Exchange 6.40, and Internet Gatekeeper 6.40 through 6.42 and 6.50 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via unknown attack vectors. NOTE: By default, the connections are only allowed from the local host.

Affected products

• F-Secure F-Secure Anti-Virus: version 6.40 only
• F-Secure Internet Gatekeeper: version 6.4 only; version 6.41 only; version 6.42 only; version 6.50 only

Published 2006-06-06. Last modified 2026-06-16.