CVE-2008-1412
Unspecified vulnerability in multiple F-Secure anti-virus products, including Internet Security...
Unspecified vulnerability in multiple F-Secure anti-virus products, including Internet Security 2006 through 2008, Anti-Virus 2006 through 2008, and others, allows remote attackers to execute arbitrary code or cause a denial of service (hang or crash) via a malformed archive that triggers an unhandled exception, as demonstrated by the PROTOS GENOME test suite for Archive Formats.
Exploit likelihood
What each source reports
NVD Score used
Unspecified vulnerability in multiple F-Secure anti-virus products, including Internet Security 2006 through 2008, Anti-Virus 2006 through 2008, and others, allows remote attackers to execute arbitrary code or cause a denial of service (hang or crash) via a malformed archive that triggers an unhandled exception, as demonstrated by the PROTOS GENOME test suite for Archive Formats.
- Record
CVE-2008-1412- CVSS 2.0
- 6.8 Medium
AV:N/AC:M/Au:N/C:P/I:P/A:P - Weakness
- CWE-20
- Updated
- 2026-11-02
CVE List No score
Unspecified vulnerability in multiple F-Secure anti-virus products, including Internet Security 2006 through 2008, Anti-Virus 2006 through 2008, and others, allows remote attackers to execute arbitrary code or cause a denial of service (hang or crash) via a malformed archive that triggers an unhandled exception, as demonstrated by the PROTOS GENOME test suite for Archive Formats.
- Record
CVE-2008-1412- Updated
- 2026-11-02
EUVDEUVD-2008-1416 No score
Unspecified vulnerability in multiple F-Secure anti-virus products, including Internet Security 2006 through 2008, Anti-Virus 2006 through 2008, and others, allows remote attackers to execute arbitrary code or cause a denial of service (hang or crash) via a malformed archive that triggers an unhandled exception, as demonstrated by the PROTOS GENOME test suite for Archive Formats.
- Record
EUVD-2008-1416- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-cjww-6mv8-7234 No score
Unspecified vulnerability in multiple F-Secure anti-virus products, including Internet Security...
Unspecified vulnerability in multiple F-Secure anti-virus products, including Internet Security 2006 through 2008, Anti-Virus 2006 through 2008, and others, allows remote attackers to execute arbitrary code or cause a denial of service (hang or crash) via a malformed archive that triggers an unhandled exception, as demonstrated by the PROTOS GENOME test suite for Archive Formats.
- Record
GHSA-cjww-6mv8-7234- Weakness
- CWE-20
- Updated
- 2026-11-02
Affected products
- f-secure anti-virus
- f-secure internet security
- f-secure anti-virus client security
- f-secure anti-virus for linux
- f-secure anti-virus for workstations
- f-secure anti-virus linux client security
- f-secure client security
- f-secure mobile antivirus for s60
- f-secure mobile antivirus for windows mobile
- f-secure mobile security for series 80
- f-secure protection service for business
- f-secure protection service for consumers
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2008-1412 is a medium vulnerability (CVSS 6.8) in F-secure Anti-virus, published March 20, 2008. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 3.60%, the 89th percentile. No source names a fixed version.
References
support.f-secure.com/enu/corporate/downloads/hotfixes/av-mimesweeper-hotfixes.shtml
f-secure.com/security/fsc-2008-2.shtml
exchange.xforce.ibmcloud.com/vulnerabilities/41234
vupen.com/english/advisories/2008/0903/references
securityfocus.com/bid/28282
cert.fi/haavoittuvuudet/joint-advisory-archive-formats.html
Show 8 moreShow less
securitytracker.com/id?1019620
ee.oulu.fi/research/ouspg/protos/testing/c10/archive
secunia.com/advisories/29397
nvd.nist.gov/vuln/detail/CVE-2008-1412
github.com/advisories/GHSA-cjww-6mv8-7234