F Secure Internet Security

Vendor:

First CVE: Aug 18, 2004 · Active for 21 years

18

Total CVEs

More Total CVEs than 93% of tracked products

2.6

Avg CVEs / Year

Higher CVE frequency than 75% of tracked products

6.9

Avg CVSS

Higher Avg CVSS than 40% of tracked products

0.0%

KEV Rate

Bottom 1%

Trends Over Time

The number and severity of CVEs published that impact F Secure Internet Security over time

Volume of CVEsAvg CVSS Base Score

First CVE

Aug 18, 2004

21 years ago

Most Recent CVE

Apr 15, 2010

5,944 days ago

CVE Severity & Scoring

F Secure Internet Security18 CVEs

50%

All CVEs352,231 CVEs

45%

40%

11%

MediumHigh

Attack Vector

Local0 (0.0%)

Network0 (0.0%)

Unknown18 (100.0%)

Physical0 (0.0%)

Adjacent Network0 (0.0%)

Attack Complexity

Low0 (0.0%)

High0 (0.0%)

Unknown18 (100.0%)

User Interaction

None0 (0.0%)

Unknown18 (100.0%)

Required0 (0.0%)

Privileges Required

Low0 (0.0%)

High0 (0.0%)

None0 (0.0%)

Unknown18 (100.0%)

Top CVEs

Signals from CVEs in this product scope (18 CVEs).

18 CVEs · Highest risk first

CVE	Published	CVSS	Risk	KEV	Exploit
CVE-2004-0234HIGH Multiple stack-based buffer overflows in the get_header function in header.c for LHA 1.14, as used in products such as Barracuda Spam Firewall, allow remote attackers or local user	Aug 18, 2004	10.0	29	NO	NO
CVE-2007-2967HIGH Multiple F-Secure anti-virus products for Microsoft Windows and Linux before 20070522 allow remote attackers to cause a denial of service (file scanning infinite loop) via certain	May 31, 2007	10.0	26	NO	NO
CVE-2004-2442MEDIUM Multiple interpretation error in various F-Secure Anti-Virus products, including Workstation 5.43 and earlier, Windows Servers 5.50 and earlier, MIMEsweeper 5.50 and earlier, Anti-	Dec 31, 2004	5.0	26	NO	YES
CVE-2007-3300HIGH Multiple F-Secure anti-virus products for Microsoft Windows and Linux before 20070619 allow remote attackers to bypass scanning via a crafted header in a (1) LHA or (2) RAR archive	Jun 20, 2007	9.3	24	NO	NO
CVE-2008-6085HIGH Integer overflow in multiple F-Secure anti-virus products, including Internet Security 2006 through 2008, Anti-Virus 2006 through 2008, and others, when configured to scan inside c	Feb 6, 2009	7.6	23	NO	NO
CVE-2007-2966HIGH Buffer overflow in the LHA decompression component in F-Secure anti-virus products for Microsoft Windows and Linux before 20070529 allows remote attackers to execute arbitrary code	May 31, 2007	7.5	22	NO	NO
CVE-2008-1412MEDIUM Unspecified vulnerability in multiple F-Secure anti-virus products, including Internet Security 2006 through 2008, Anti-Virus 2006 through 2008, and others, allows remote attackers	Mar 20, 2008	6.8	21	NO	NO
CVE-2006-0337HIGH Buffer overflow in multiple F-Secure Anti-Virus products and versions for Windows and Linux, including Anti-Virus for Windows Servers 5.52 and earlier, Internet Security 2004, 2005	Jan 21, 2006	7.5	21	NO	NO
CVE-2008-0910HIGH Multiple F-Secure anti-virus products, including Internet Security 2006 through 2008, Anti-Virus 2006 through 2008, F-Secure Protection Service, and others, allow remote attackers	Feb 22, 2008	7.5	20	NO	NO
CVE-2005-0350HIGH Heap-based buffer overflow in multiple F-Secure Anti-Virus and Internet Security products allows remote attackers to execute arbitrary code via a crafted ARJ archive.	May 2, 2005	7.5	20	NO	NO

View all 18 CVEs →

Exploit Exposure

Signals from CVEs in this product scope (18 CVEs).

CISA KEV

0 CVEs

0.0% of CVEs· Bottom 1%

Metasploit

0 CVEs

0.0% of CVEs· Bottom 1%

Nuclei

0 CVEs

0.0% of CVEs· Bottom 1%

ExploitDB

1 CVE

5.6% of CVEs· 88th percentile

Social Chatter

Signals from CVEs in this product scope (18 CVEs).

Media Mentions

Signals from CVEs in this product scope (18 CVEs).

Top CNAs Publishing CVEs For F Secure Internet Security

Top CWEs

Versions

Version	CVE Count	Avg CVSS	Avg EPSS	Exploits
7.02	2	6.3	3.8%	0
2009	2	6.3	3.8%	0
2008	5	6.5	3.2%	0
2007	9	7.0	3.2%	0
2006	13	6.9	3.2%	0
2005	11	6.7	3.8%	1
2004	9	6.3	4.7%	1
2003	5	6.3	3.9%	0