CVE-2007-2966 - CVE House
Back to Database
Status published High CVE-2007-2966

Buffer overflow in the LHA decompression component in F-Secure anti-virus...

Vulnerability Description

Buffer overflow in the LHA decompression component in F-Secure anti-virus products for Microsoft Windows and Linux before 20070529 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted LHA archive, related to an integer wrap, a similar issue to CVE-2006-4335.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2007-2966

Credits & Attribution

No credits recorded in the NVD database.

References

More from f-secure

View All →
CVE-2022-47524
F-Secure SAFE Browser 19.1 before 19.2 for Android allows an...
Unknown 0
CVE-2022-45871
Denial-of-Service (DoS) Vulnerability
Medium 4.3
CVE-2022-38166
In F-Secure Endpoint Protection for Windows and macOS before channel...
Unknown 0
CVE-2022-38164
A vulnerability affecting F-Secure SAFE browser for Android and iOS...
Unknown 0
CVE-2022-38163
A Drag and Drop spoof vulnerability was discovered in F-Secure...
Unknown 0

Affected Vendor

Affected Software

f-secure anti-virus, f-secure anti-virus client security, f-secure anti-virus linux client security, f-secure anti-virus linux server security, f-secure internet security, f-secure protection service, internet gatekeeper
Vulnerable Versions:
0, 2005, 2006, 2007

Timeline

Official Publish: May 31st, 2007
Last Modified: August 7th, 2024
Added to House: July 18th, 2026

CVSS Vectors

Weaknesses (CWE)

No CWE data available

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.