F-Secure Anti-Virus for Microsoft Exchange 6.30 and 6.31 does not properly detect certain password-protected files in a ZIP file, which allo

Affected versions

NVD version ranges (for catalog products). Add the product to your stack with a version and matching uses these.

• f-secure f-secure anti-virus6.30
• f-secure f-secure anti-virus6.30_sr1
• f-secure f-secure anti-virus6.31

Other highest-scoring records for the same primary product.

• CVE-2007-2967Multiple F-Secure anti-virus products for Microsoft Windows and Linux before 20070522 allow remote attackers to cause a denial of service (f
  41Plan
• CVE-2006-6409F-Secure Anti-Virus for Linux Gateways 4.65 allows remote attackers to cause a denial of service (possibly fatal scan error), and possibly b
  41Plan
• CVE-2007-3300Multiple F-Secure anti-virus products for Microsoft Windows and Linux before 20070619 allow remote attackers to bypass scanning via a crafte
  38Monitor
• CVE-2008-6085Integer overflow in multiple F-Secure anti-virus products, including Internet Security 2006 through 2008, Anti-Virus 2006 through 2008, and
  32Monitor
• CVE-2007-2966Buffer overflow in the LHA decompression component in F-Secure anti-virus products for Microsoft Windows and Linux before 20070529 allows re
  32Monitor
• CVE-2006-2838Buffer overflow in the web console in F-Secure Anti-Virus for Microsoft Exchange 6.40, and Internet Gatekeeper 6.40 through 6.42 and 6.50 al
  32Monitor

FIRST EPSS daily score; only changes of 0.01 or more are recorded (step chart).

Attack context

MITRE CAPEC attack patterns and ATT&CK techniques for this weakness class (CWE). A starting point for detection rules and threat hunting.

MITRE has no CAPEC/ATT&CK mapping for this CWE.