CVE-2008-1412: F-Secure Anti-Virus

Medium severity, CVSS 6.8. EPSS: 3.6% chance of exploitation in the next 30 days.

Unspecified vulnerability in multiple F-Secure anti-virus products, including Internet Security 2006 through 2008, Anti-Virus 2006 through 2008, and others, allows remote attackers to execute arbitrary code or cause a denial of service (hang or crash) via a malformed archive that triggers an unhandled exception, as demonstrated by the PROTOS GENOME test suite for Archive Formats.

Affected products

• F-Secure F-Secure Anti-Virus: version 2006 only; version 2007 only; version 2008 only
• F-Secure F-Secure Anti-Virus Client Security: up to and including 6.04
• F-Secure F-Secure Anti-Virus For Linux: up to and including 4.65
• F-Secure F-Secure Anti-Virus For Workstations: up to and including 7.11
• F-Secure F-Secure Anti-Virus Linux Client Security: up to and including 5.54
• F-Secure F-Secure Client Security: up to and including 7.11
• F-Secure F-Secure Internet Security: version 2006 only; version 2007 only; version 2008 only
• F-Secure F-Secure Mobile Antivirus For s60: version 2nd_edition only
• F-Secure F-Secure Mobile Antivirus For Windows Mobile: version 5.0 only; version 6 only; version 2003 only
• F-Secure F-Secure Mobile Security For Series 80: any version
• F-Secure F-Secure Protection Service For Business: up to and including 3.10
• F-Secure F-Secure Protection Service For Consumers: up to and including 7.00

Published 2008-03-20. Last modified 2026-06-16.