Every CVE Search/ Get API key

CVE-2006-6409

F-Secure Anti-Virus for Linux Gateways 4.65 allows remote attackers to cause a denial of service ...

10.0 High

F-Secure Anti-Virus for Linux Gateways 4.65 allows remote attackers to cause a denial of service (possibly fatal scan error), and possibly bypass virus detection, by inserting invalid characters into base64 encoded content in a multipart/mixed MIME file, as demonstrated with the EICAR test file.

Exploit likelihood

3.80%Up 2.7 points since Feb 4, 2022
90%50%10%1%

What each source reports

NVD Score used 10.0

F-Secure Anti-Virus for Linux Gateways 4.65 allows remote attackers to cause a denial of service (possibly fatal scan error), and possibly bypass virus detection, by inserting invalid characters into base64 encoded content in a multipart/mixed MIME file, as demonstrated with the EICAR test file.

Record
CVE-2006-6409
CVSS 2.0
10.0 HighAV:N/AC:L/Au:N/C:C/I:C/A:C
Updated
2026-11-02
CVE List No score

F-Secure Anti-Virus for Linux Gateways 4.65 allows remote attackers to cause a denial of service (possibly fatal scan error), and possibly bypass virus detection, by inserting invalid characters into base64 encoded content in a multipart/mixed MIME file, as demonstrated with the EICAR test file.

Record
CVE-2006-6409
Updated
2026-11-02
EUVDEUVD-2006-6392 No score

F-Secure Anti-Virus for Linux Gateways 4.65 allows remote attackers to cause a denial of service (possibly fatal scan error), and possibly bypass virus detection, by inserting invalid characters into base64 encoded content in a multipart/mixed MIME file, as demonstrated with the EICAR test file.

Record
EUVD-2006-6392
Updated
2026-11-03
GitHub AdvisoriesGHSA-g2gr-xwg2-64rc No score

F-Secure Anti-Virus for Linux Gateways 4.65 allows remote attackers to cause a denial of service ...

F-Secure Anti-Virus for Linux Gateways 4.65 allows remote attackers to cause a denial of service (possibly fatal scan error), and possibly bypass virus detection, by inserting invalid characters into base64 encoded content in a multipart/mixed MIME file, as demonstrated with the EICAR test file.

Record
GHSA-g2gr-xwg2-64rc
Updated
2026-11-02

Affected products

History

History
RecordedChangedSources
aliasesEUVD
first indexedCVE List, GitHub Advisories, NVD

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2006-6409 is a high vulnerability (CVSS 10.0) in F-secure Anti-virus, published December 10, 2006. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 3.80%, the 90th percentile. No source names a fixed version.

References

MoveEnter Open