Search/CVE-2008-6085
● CVE

CVE-2008-6085

Vendorf-secureProductf-secure anti-virus, f-secure internet security, f-secure anti-virus linux client security, f-secure anti-virus linux server security, f-secure anti-virus for workstations, f-secure protection service for business, f-secure protection service for consumers, f-secure client security, f-secure anti-virus for citrix servers, f-secure anti-virus for microsoft exchange, f-secure anti-virus for mimesweeper, f-secure anti-virus for windows servers, f-secure home server security, f-secure internet gatekeeper for linux, f-secure internet gatekeeper for windows, f-secure linux security, f-secure messaging security gatewayDiscoveredFeb 6, 2009UpdatedApr 23, 2026

Integer overflow in multiple F-Secure anti-virus products, including Internet Security 2006 through 2008, Anti-Virus 2006 through 2008, and others, when configured to scan inside compressed archives, allows remote attackers to execute arbitrary code via a crafted RPM compressed archive file, which triggers a buffer overflow.

CVSS v3.1
—
EPSS
5.54%
probability of exploitation in 30 days
CISA KEV
Not listed
no confirmed exploitation reported
News coverage
0
sources referencing this CVE
Related IOCs
0
seen in the same coverage
Connections
18 relationships
Timeline
disclosure → media coverage
Feb 6, 2009
Disclosure — published as a CVE record. · last revised by NVD Apr 23, 2026