CVE-2007-3300: F-Secure Anti-Virus

High severity, CVSS 9.3. EPSS: 3.7% chance of exploitation in the next 30 days.

Multiple F-Secure anti-virus products for Microsoft Windows and Linux before 20070619 allow remote attackers to bypass scanning via a crafted header in a (1) LHA or (2) RAR archive.

Affected products

• F-Secure F-Secure Anti-Virus: version 2.16 only; version 4.51 only; version 4.52 only; version 4.61 only; version 4.64 only; version 4.65 only; …
• F-Secure F-Secure Anti-Virus Linux Client Security: up to and including 5.52
• F-Secure F-Secure Anti-Virus Linux Server Security: up to and including 5.52
• F-Secure F-Secure Internet Security: version 2005 only; version 2006 only; version 2007 only
• F-Secure Internet Gatekeeper: up to and including 6.61; version 2.06 only; version 2.14 only; version 2.15.484 only; version 2.16 only
• F-Secure Solutions Based On F-Secure Personal Express: version 6.20 only

Published 2007-06-20. Last modified 2026-06-16.