{"cve":{"cve_id":"CVE-2008-6085","is_kev":false,"kev_date_added":null,"kev_vendor_project":null,"kev_product":null,"kev_vulnerability_name":null,"kev_short_description":null,"kev_required_action":null,"kev_due_date":null,"kev_known_ransomware":null,"kev_notes":null,"kev_cwes":null,"epss_score":0.05535,"epss_percentile":0.91803,"epss_as_of":"2026-06-23","description":"Integer overflow in multiple F-Secure anti-virus products, including Internet Security 2006 through 2008, Anti-Virus 2006 through 2008, and others, when configured to scan inside compressed archives, allows remote attackers to execute arbitrary code via a crafted RPM compressed archive file, which triggers a buffer overflow.","published_at":"2009-02-06T11:00:00Z","last_modified_at":"2026-06-16T23:01:34.320000Z","cvss_v3_score":null,"cvss_v3_vector":null,"cvss_v3_severity":null,"cvss_v4_score":null,"cvss_v4_vector":null,"cvss_v4_severity":null,"ssvc_decision":null,"ssvc_exploitation":null,"ssvc_automatable":null,"ssvc_technical_impact":null,"cwes":["CWE-189"],"nvd_references":["http://www.securityfocus.com/bid/31846","http://www.securitytracker.com/id?1021073","http://www.f-secure.com/security/fsc-2008-3.shtml","http://secunia.com/advisories/32352","http://www.vupen.com/english/advisories/2008/2874","https://exchange.xforce.ibmcloud.com/vulnerabilities/46016"],"vuln_status":"Modified","trending_score":null,"is_trending":false,"has_trended":false,"trended_number_one":false,"trending_peak_score":null,"trending_peak_rank":null,"started_trending_at":null,"trended_number_one_at":null,"summary_generated":null,"summary_generated_at":null,"summary_model":null,"created_at":"2026-06-24T00:09:39.878444Z","updated_at":"2026-06-28T23:04:46.521713Z"},"effective_severity":null,"badges":[],"impact_analysis":[],"cvss_v3_decoded":{"version":null,"metrics":[]},"cvss_v4_decoded":{"version":null,"metrics":[]},"affected":[{"vendor_slug":"f-secure","vendor_name":"F-Secure","product_slug":"f-secure-anti-virus","product_name":"f-secure_anti-virus","version_start":"7.02","version_start_inclusive":true,"version_end":"7.02","version_end_inclusive":true,"cpe23_uri":"cpe:2.3:a:f-secure:f-secure_anti-virus:7.02:*:*:*:*:*:*:*"},{"vendor_slug":"f-secure","vendor_name":"F-Secure","product_slug":"f-secure-anti-virus","product_name":"f-secure_anti-virus","version_start":"2006","version_start_inclusive":true,"version_end":"2006","version_end_inclusive":true,"cpe23_uri":"cpe:2.3:a:f-secure:f-secure_anti-virus:2006:*:*:*:*:*:*:*"},{"vendor_slug":"f-secure","vendor_name":"F-Secure","product_slug":"f-secure-anti-virus","product_name":"f-secure_anti-virus","version_start":"2007","version_start_inclusive":true,"version_end":"2007","version_end_inclusive":true,"cpe23_uri":"cpe:2.3:a:f-secure:f-secure_anti-virus:2007:*:*:*:*:*:*:*"},{"vendor_slug":"f-secure","vendor_name":"F-Secure","product_slug":"f-secure-anti-virus","product_name":"f-secure_anti-virus","version_start":"2007","version_start_inclusive":true,"version_end":"2007","version_end_inclusive":true,"cpe23_uri":"cpe:2.3:a:f-secure:f-secure_anti-virus:2007:*:second:*:*:*:*:*"},{"vendor_slug":"f-secure","vendor_name":"F-Secure","product_slug":"f-secure-anti-virus","product_name":"f-secure_anti-virus","version_start":"2008","version_start_inclusive":true,"version_end":"2008","version_end_inclusive":true,"cpe23_uri":"cpe:2.3:a:f-secure:f-secure_anti-virus:2008:*:*:*:*:*:*:*"},{"vendor_slug":"f-secure","vendor_name":"F-Secure","product_slug":"f-secure-anti-virus","product_name":"f-secure_anti-virus","version_start":"2009","version_start_inclusive":true,"version_end":"2009","version_end_inclusive":true,"cpe23_uri":"cpe:2.3:a:f-secure:f-secure_anti-virus:2009:*:*:*:*:*:*:*"},{"vendor_slug":"f-secure","vendor_name":"F-Secure","product_slug":"f-secure-anti-virus-for-citrix-servers","product_name":"f-secure_anti-virus_for_citrix_servers","version_start":null,"version_start_inclusive":null,"version_end":"7.00","version_end_inclusive":true,"cpe23_uri":"cpe:2.3:a:f-secure:f-secure_anti-virus_for_citrix_servers:*:*:*:*:*:*:*:*"},{"vendor_slug":"f-secure","vendor_name":"F-Secure","product_slug":"f-secure-anti-virus-for-microsoft-exchange","product_name":"f-secure_anti-virus_for_microsoft_exchange","version_start":null,"version_start_inclusive":null,"version_end":"7.10","version_end_inclusive":true,"cpe23_uri":"cpe:2.3:a:f-secure:f-secure_anti-virus_for_microsoft_exchange:*:*:*:*:*:*:*:*"},{"vendor_slug":"f-secure","vendor_name":"F-Secure","product_slug":"f-secure-anti-virus-for-microsoft-exchange","product_name":"f-secure_anti-virus_for_microsoft_exchange","version_start":"6.62","version_start_inclusive":true,"version_end":"6.62","version_end_inclusive":true,"cpe23_uri":"cpe:2.3:a:f-secure:f-secure_anti-virus_for_microsoft_exchange:6.62:*:*:*:*:*:*:*"},{"vendor_slug":"f-secure","vendor_name":"F-Secure","product_slug":"f-secure-anti-virus-for-microsoft-exchange","product_name":"f-secure_anti-virus_for_microsoft_exchange","version_start":"7.00","version_start_inclusive":true,"version_end":"7.00","version_end_inclusive":true,"cpe23_uri":"cpe:2.3:a:f-secure:f-secure_anti-virus_for_microsoft_exchange:7.00:*:*:*:*:*:*:*"},{"vendor_slug":"f-secure","vendor_name":"F-Secure","product_slug":"f-secure-anti-virus-for-mimesweeper","product_name":"f-secure_anti-virus_for_mimesweeper","version_start":null,"version_start_inclusive":null,"version_end":"5.61","version_end_inclusive":true,"cpe23_uri":"cpe:2.3:a:f-secure:f-secure_anti-virus_for_mimesweeper:*:*:*:*:*:*:*:*"},{"vendor_slug":"f-secure","vendor_name":"F-Secure","product_slug":"f-secure-anti-virus-for-windows-servers","product_name":"f-secure_anti-virus_for_windows_servers","version_start":null,"version_start_inclusive":null,"version_end":"8.00","version_end_inclusive":true,"cpe23_uri":"cpe:2.3:a:f-secure:f-secure_anti-virus_for_windows_servers:*:*:*:*:*:*:*:*"},{"vendor_slug":"f-secure","vendor_name":"F-Secure","product_slug":"f-secure-anti-virus-for-workstations","product_name":"f-secure_anti-virus_for_workstations","version_start":"7.10","version_start_inclusive":true,"version_end":"7.10","version_end_inclusive":true,"cpe23_uri":"cpe:2.3:a:f-secure:f-secure_anti-virus_for_workstations:7.10:*:*:*:*:*:*:*"},{"vendor_slug":"f-secure","vendor_name":"F-Secure","product_slug":"f-secure-anti-virus-for-workstations","product_name":"f-secure_anti-virus_for_workstations","version_start":"7.11","version_start_inclusive":true,"version_end":"7.11","version_end_inclusive":true,"cpe23_uri":"cpe:2.3:a:f-secure:f-secure_anti-virus_for_workstations:7.11:*:*:*:*:*:*:*"},{"vendor_slug":"f-secure","vendor_name":"F-Secure","product_slug":"f-secure-anti-virus-linux-client-security","product_name":"f-secure_anti-virus_linux_client_security","version_start":null,"version_start_inclusive":null,"version_end":"5.54","version_end_inclusive":true,"cpe23_uri":"cpe:2.3:a:f-secure:f-secure_anti-virus_linux_client_security:*:*:*:*:*:*:*:*"},{"vendor_slug":"f-secure","vendor_name":"F-Secure","product_slug":"f-secure-anti-virus-linux-client-security","product_name":"f-secure_anti-virus_linux_client_security","version_start":"5.30","version_start_inclusive":true,"version_end":"5.30","version_end_inclusive":true,"cpe23_uri":"cpe:2.3:a:f-secure:f-secure_anti-virus_linux_client_security:5.30:*:*:*:*:*:*:*"},{"vendor_slug":"f-secure","vendor_name":"F-Secure","product_slug":"f-secure-anti-virus-linux-client-security","product_name":"f-secure_anti-virus_linux_client_security","version_start":"5.52","version_start_inclusive":true,"version_end":"5.52","version_end_inclusive":true,"cpe23_uri":"cpe:2.3:a:f-secure:f-secure_anti-virus_linux_client_security:5.52:*:*:*:*:*:*:*"},{"vendor_slug":"f-secure","vendor_name":"F-Secure","product_slug":"f-secure-anti-virus-linux-client-security","product_name":"f-secure_anti-virus_linux_client_security","version_start":"5.53","version_start_inclusive":true,"version_end":"5.53","version_end_inclusive":true,"cpe23_uri":"cpe:2.3:a:f-secure:f-secure_anti-virus_linux_client_security:5.53:*:*:*:*:*:*:*"},{"vendor_slug":"f-secure","vendor_name":"F-Secure","product_slug":"f-secure-anti-virus-linux-server-security","product_name":"f-secure_anti-virus_linux_server_security","version_start":null,"version_start_inclusive":null,"version_end":"5.54","version_end_inclusive":true,"cpe23_uri":"cpe:2.3:a:f-secure:f-secure_anti-virus_linux_server_security:*:*:*:*:*:*:*:*"},{"vendor_slug":"f-secure","vendor_name":"F-Secure","product_slug":"f-secure-anti-virus-linux-server-security","product_name":"f-secure_anti-virus_linux_server_security","version_start":"5.30","version_start_inclusive":true,"version_end":"5.30","version_end_inclusive":true,"cpe23_uri":"cpe:2.3:a:f-secure:f-secure_anti-virus_linux_server_security:5.30:*:*:*:*:*:*:*"},{"vendor_slug":"f-secure","vendor_name":"F-Secure","product_slug":"f-secure-anti-virus-linux-server-security","product_name":"f-secure_anti-virus_linux_server_security","version_start":"5.52","version_start_inclusive":true,"version_end":"5.52","version_end_inclusive":true,"cpe23_uri":"cpe:2.3:a:f-secure:f-secure_anti-virus_linux_server_security:5.52:*:*:*:*:*:*:*"},{"vendor_slug":"f-secure","vendor_name":"F-Secure","product_slug":"f-secure-client-security","product_name":"f-secure_client_security","version_start":null,"version_start_inclusive":null,"version_end":"7.12","version_end_inclusive":true,"cpe23_uri":"cpe:2.3:a:f-secure:f-secure_client_security:*:*:*:*:*:*:*:*"},{"vendor_slug":"f-secure","vendor_name":"F-Secure","product_slug":"f-secure-client-security","product_name":"f-secure_client_security","version_start":"7.11","version_start_inclusive":true,"version_end":"7.11","version_end_inclusive":true,"cpe23_uri":"cpe:2.3:a:f-secure:f-secure_client_security:7.11:*:*:*:*:*:*:*"},{"vendor_slug":"f-secure","vendor_name":"F-Secure","product_slug":"f-secure-home-server-security","product_name":"f-secure_home_server_security","version_start":"2009","version_start_inclusive":true,"version_end":"2009","version_end_inclusive":true,"cpe23_uri":"cpe:2.3:a:f-secure:f-secure_home_server_security:2009:*:*:*:*:*:*:*"},{"vendor_slug":"f-secure","vendor_name":"F-Secure","product_slug":"f-secure-internet-gatekeeper-for-linux","product_name":"f-secure_internet_gatekeeper_for_linux","version_start":null,"version_start_inclusive":null,"version_end":"2.16","version_end_inclusive":true,"cpe23_uri":"cpe:2.3:a:f-secure:f-secure_internet_gatekeeper_for_linux:*:*:*:*:*:*:*:*"},{"vendor_slug":"f-secure","vendor_name":"F-Secure","product_slug":"f-secure-internet-gatekeeper-for-windows","product_name":"f-secure_internet_gatekeeper_for_windows","version_start":null,"version_start_inclusive":null,"version_end":"6.61","version_end_inclusive":true,"cpe23_uri":"cpe:2.3:a:f-secure:f-secure_internet_gatekeeper_for_windows:*:*:*:*:*:*:*:*"},{"vendor_slug":"f-secure","vendor_name":"F-Secure","product_slug":"f-secure-internet-security","product_name":"f-secure_internet_security","version_start":"7.02","version_start_inclusive":true,"version_end":"7.02","version_end_inclusive":true,"cpe23_uri":"cpe:2.3:a:f-secure:f-secure_internet_security:7.02:*:*:*:*:*:*:*"},{"vendor_slug":"f-secure","vendor_name":"F-Secure","product_slug":"f-secure-internet-security","product_name":"f-secure_internet_security","version_start":"2006","version_start_inclusive":true,"version_end":"2006","version_end_inclusive":true,"cpe23_uri":"cpe:2.3:a:f-secure:f-secure_internet_security:2006:*:*:*:*:*:*:*"},{"vendor_slug":"f-secure","vendor_name":"F-Secure","product_slug":"f-secure-internet-security","product_name":"f-secure_internet_security","version_start":"2007","version_start_inclusive":true,"version_end":"2007","version_end_inclusive":true,"cpe23_uri":"cpe:2.3:a:f-secure:f-secure_internet_security:2007:*:*:*:*:*:*:*"},{"vendor_slug":"f-secure","vendor_name":"F-Secure","product_slug":"f-secure-internet-security","product_name":"f-secure_internet_security","version_start":"2007","version_start_inclusive":true,"version_end":"2007","version_end_inclusive":true,"cpe23_uri":"cpe:2.3:a:f-secure:f-secure_internet_security:2007:*:second:*:*:*:*:*"},{"vendor_slug":"f-secure","vendor_name":"F-Secure","product_slug":"f-secure-internet-security","product_name":"f-secure_internet_security","version_start":"2008","version_start_inclusive":true,"version_end":"2008","version_end_inclusive":true,"cpe23_uri":"cpe:2.3:a:f-secure:f-secure_internet_security:2008:*:*:*:*:*:*:*"},{"vendor_slug":"f-secure","vendor_name":"F-Secure","product_slug":"f-secure-internet-security","product_name":"f-secure_internet_security","version_start":"2009","version_start_inclusive":true,"version_end":"2009","version_end_inclusive":true,"cpe23_uri":"cpe:2.3:a:f-secure:f-secure_internet_security:2009:*:*:*:*:*:*:*"},{"vendor_slug":"f-secure","vendor_name":"F-Secure","product_slug":"f-secure-linux-security","product_name":"f-secure_linux_security","version_start":null,"version_start_inclusive":null,"version_end":"7.01","version_end_inclusive":true,"cpe23_uri":"cpe:2.3:a:f-secure:f-secure_linux_security:*:*:*:*:*:*:*:*"},{"vendor_slug":"f-secure","vendor_name":"F-Secure","product_slug":"f-secure-messaging-security-gateway","product_name":"f-secure_messaging_security_gateway","version_start":null,"version_start_inclusive":null,"version_end":"5.0.4","version_end_inclusive":true,"cpe23_uri":"cpe:2.3:a:f-secure:f-secure_messaging_security_gateway:*:*:*:*:*:*:*:*"},{"vendor_slug":"f-secure","vendor_name":"F-Secure","product_slug":"f-secure-messaging-security-gateway","product_name":"f-secure_messaging_security_gateway","version_start":"4.0.7","version_start_inclusive":true,"version_end":"4.0.7","version_end_inclusive":true,"cpe23_uri":"cpe:2.3:a:f-secure:f-secure_messaging_security_gateway:4.0.7:*:*:*:*:*:*:*"},{"vendor_slug":"f-secure","vendor_name":"F-Secure","product_slug":"f-secure-protection-service-for-business","product_name":"f-secure_protection_service_for_business","version_start":null,"version_start_inclusive":null,"version_end":"3.10","version_end_inclusive":true,"cpe23_uri":"cpe:2.3:a:f-secure:f-secure_protection_service_for_business:*:*:*:*:*:*:*:*"},{"vendor_slug":"f-secure","vendor_name":"F-Secure","product_slug":"f-secure-protection-service-for-business","product_name":"f-secure_protection_service_for_business","version_start":"3.00","version_start_inclusive":true,"version_end":"3.00","version_end_inclusive":true,"cpe23_uri":"cpe:2.3:a:f-secure:f-secure_protection_service_for_business:3.00:*:*:*:*:*:*:*"},{"vendor_slug":"f-secure","vendor_name":"F-Secure","product_slug":"f-secure-protection-service-for-consumers","product_name":"f-secure_protection_service_for_consumers","version_start":null,"version_start_inclusive":null,"version_end":"8.00","version_end_inclusive":true,"cpe23_uri":"cpe:2.3:a:f-secure:f-secure_protection_service_for_consumers:*:*:*:*:*:*:*:*"},{"vendor_slug":"f-secure","vendor_name":"F-Secure","product_slug":"f-secure-protection-service-for-consumers","product_name":"f-secure_protection_service_for_consumers","version_start":"5.00","version_start_inclusive":true,"version_end":"5.00","version_end_inclusive":true,"cpe23_uri":"cpe:2.3:a:f-secure:f-secure_protection_service_for_consumers:5.00:*:*:*:*:*:*:*"},{"vendor_slug":"f-secure","vendor_name":"F-Secure","product_slug":"f-secure-protection-service-for-consumers","product_name":"f-secure_protection_service_for_consumers","version_start":"6.00","version_start_inclusive":true,"version_end":"6.00","version_end_inclusive":true,"cpe23_uri":"cpe:2.3:a:f-secure:f-secure_protection_service_for_consumers:6.00:*:*:*:*:*:*:*"},{"vendor_slug":"f-secure","vendor_name":"F-Secure","product_slug":"f-secure-protection-service-for-consumers","product_name":"f-secure_protection_service_for_consumers","version_start":"7.00","version_start_inclusive":true,"version_end":"7.00","version_end_inclusive":true,"cpe23_uri":"cpe:2.3:a:f-secure:f-secure_protection_service_for_consumers:7.00:*:*:*:*:*:*:*"}],"exploit_refs":[],"news":[],"references":[{"url":"http://www.securityfocus.com/bid/31846","source_type":"MISC","tags":[]},{"url":"http://www.securitytracker.com/id?1021073","source_type":"MISC","tags":[]},{"url":"http://www.f-secure.com/security/fsc-2008-3.shtml","source_type":"MISC","tags":[]},{"url":"http://secunia.com/advisories/32352","source_type":"VENDOR_ADVISORY","tags":["advisory"]},{"url":"http://www.vupen.com/english/advisories/2008/2874","source_type":"VENDOR_ADVISORY","tags":["advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46016","source_type":"MISC","tags":[]}],"timeline":[{"type":"published","at":"2009-02-06T11:00:00Z","label":"CVE published","source":null}]}