CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2007-2966

Buffer overflow in the LHA decompression component in F-Secure anti-virus products for Microsoft Windows and Linux before 20070529 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted LHA archive, related to an integer wrap, a similar issue to CVE-2006-4335.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.058

EPSS Ranking 90.0%

CVSS Severity

CVSS v2 Score 7.5

References

Products affected by CVE-2007-2966

F-Secure » F-Secure Anti-Virus » Version: Any

cpe:2.3:a:f-secure:f-secure_anti-virus:*
F-Secure » F-Secure Anti-Virus » Version: 2005

cpe:2.3:a:f-secure:f-secure_anti-virus:2005
F-Secure » F-Secure Anti-Virus » Version: 2006

cpe:2.3:a:f-secure:f-secure_anti-virus:2006
F-Secure » F-Secure Anti-Virus » Version: 2007

cpe:2.3:a:f-secure:f-secure_anti-virus:2007
F-Secure » F-Secure Anti-Virus Client Security » Version: Any

cpe:2.3:a:f-secure:f-secure_anti-virus_client_security:*
F-Secure » F-Secure Anti-Virus Linux Client Security » Version: Any

cpe:2.3:a:f-secure:f-secure_anti-virus_linux_client_security:*
F-Secure » F-Secure Anti-Virus Linux Server Security » Version: Any

cpe:2.3:a:f-secure:f-secure_anti-virus_linux_server_security:*
F-Secure » F-Secure Internet Security » Version: 2005

cpe:2.3:a:f-secure:f-secure_internet_security:2005
F-Secure » F-Secure Internet Security » Version: 2006

cpe:2.3:a:f-secure:f-secure_internet_security:2006
F-Secure » F-Secure Internet Security » Version: 2007

cpe:2.3:a:f-secure:f-secure_internet_security:2007
F-Secure » F-Secure Protection Service » Version: Any

cpe:2.3:a:f-secure:f-secure_protection_service:*
F-Secure » Internet Gatekeeper » Version: Any

cpe:2.3:a:f-secure:internet_gatekeeper:*
F-Secure » Internet Gatekeeper » Version: N/A

cpe:2.3:a:f-secure:internet_gatekeeper:-

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2007-2966

Products

Pricing

Contact Us