CVE-2007-2967

Published: May 31, 2007Modified: Apr 23, 2026

10.0

Vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Exploitability: 10.0 / Impact: 10.0

Source: NVD

Description

Multiple F-Secure anti-virus products for Microsoft Windows and Linux before 20070522 allow remote attackers to cause a denial of service (file scanning infinite loop) via certain crafted (1) ARJ archives or (2) FSG packed files.

Affected (19)

Products: F Secure: F Secure Anti Virus, F Secure Anti Virus Client Security, F Secure Anti Virus Linux Client Security, F Secure Anti Virus Linux Server Security, F Secure Internet Security, F Secure Protection Service, Internet Gatekeeper

7 products

F Secure Anti Virus

F Secure Anti Virus Client Security

F Secure Anti Virus Linux Client Security

F Secure Anti Virus Linux Server Security

F Secure Internet Security

F Secure Protection Service

Internet Gatekeeper

Configuration A

19 vulnerable

Vulnerable Software	Affected Versions
F Secure F Secure Anti Virus	Up to 5.52
F Secure F Secure Anti Virus	Up to 4.65
F Secure F Secure Anti Virus	Up to 4.65
F Secure F Secure Anti Virus	Up to 5.61
F Secure F Secure Anti Virus	Up to 6.40
F Secure F Secure Anti Virus	Up to 5.42
F Secure F Secure Anti Virus	Up to 5.44
F Secure F Secure Anti Virus	Version 2005
F Secure F Secure Anti Virus	Version 2006
F Secure F Secure Anti Virus	Version 2007
F Secure F Secure Anti Virus Client Security	Up to 6.03
F Secure F Secure Anti Virus Linux Client Security	Up to 5.30
F Secure F Secure Anti Virus Linux Server Security	Up to 5.30
F Secure F Secure Internet Security	Version 2005
F Secure F Secure Internet Security	Version 2006
F Secure F Secure Internet Security	Version 2007
F Secure F Secure Protection Service	Up to 6.40
F Secure Internet Gatekeeper	Up to 6.60
F Secure Internet Gatekeeper	Up to 2.16

Related CWEs

Improper Input Validation

The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

References (30)

http://lists.grok.org.uk/pipermail/full-disclosure/2007-June/063714.html

Source: cve@mitre.org

http://lists.grok.org.uk/pipermail/full-disclosure/2007-June/063715.html

Source: cve@mitre.org

http://osvdb.org/36725

Source: cve@mitre.org

http://osvdb.org/36726

Source: cve@mitre.org

http://secunia.com/advisories/25440

Source: cve@mitre.org

Vendor Advisory

http://securitytracker.com/id?1018147

Source: cve@mitre.org

http://www.f-secure.com/security/fsc-2007-3.shtml

Source: cve@mitre.org

PatchVendor Advisory

http://www.nruns.com/security_advisory_fsecure_arj.php

Source: cve@mitre.org

http://www.nruns.com/security_advisory_fsecure_fsg.php

Source: cve@mitre.org

http://www.securityfocus.com/archive/1/470462/100/0/threaded

Source: cve@mitre.org

http://www.securityfocus.com/archive/1/470484/100/0/threaded

Source: cve@mitre.org

http://www.securitytracker.com/id?1018146

Source: cve@mitre.org

http://www.securitytracker.com/id?1018148

Source: cve@mitre.org

http://www.vupen.com/english/advisories/2007/1985

Source: cve@mitre.org

Vendor Advisory

https://exchange.xforce.ibmcloud.com/vulnerabilities/34581

Source: cve@mitre.org

http://lists.grok.org.uk/pipermail/full-disclosure/2007-June/063714.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://lists.grok.org.uk/pipermail/full-disclosure/2007-June/063715.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://osvdb.org/36725

Source: af854a3a-2127-422b-91ae-364da2661108

http://osvdb.org/36726

Source: af854a3a-2127-422b-91ae-364da2661108

http://secunia.com/advisories/25440

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

http://securitytracker.com/id?1018147

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.f-secure.com/security/fsc-2007-3.shtml

Source: af854a3a-2127-422b-91ae-364da2661108

PatchVendor Advisory

http://www.nruns.com/security_advisory_fsecure_arj.php

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.nruns.com/security_advisory_fsecure_fsg.php

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.securityfocus.com/archive/1/470462/100/0/threaded

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.securityfocus.com/archive/1/470484/100/0/threaded

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.securitytracker.com/id?1018146

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.securitytracker.com/id?1018148

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.vupen.com/english/advisories/2007/1985

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

https://exchange.xforce.ibmcloud.com/vulnerabilities/34581

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.