CVE:CVE-2007-3300
CNNVD:CNNVD-200706-308
F-Secure Internet Gatekeeper和F-Secure Anti-Virus都是芬兰的一家杀毒软件厂商所发布的杀毒产品。
F-Secure的这些防病病毒工具处理畸形LHA和RAR文档时存在漏洞，远程攻击者可能利用此漏洞绕过扫描检测。
如果LHA和RAR文件设置了畸形的文档文件头的话，这些文件就可能绕过F-Secure产品的杀毒扫描，导致在用户系统上执行非授权操作。
solution:Upgrade f-secure f-secure_anti-virus to a higher version than 2.16,4.51,4.52,4.61,4.64,4.65,5.0.2,5.2.1,5.3.0,5.5,5.40,5.41,5.42,5.43,5.44,5.52,5.54,5.55,5.56,5.61,6.01,6.02,6.2,6.03,6.21,6.30,6.30_sr1,6.31,6.40,6.60,6.61,7.00,2005,2006,2007,and avoid the version 2.16,4.51,4.52,4.61,4.64,4.65,5.0.2,5.2.1,5.3.0,5.5,5.40,5.41,5.42,5.43,5.44,5.52,5.54,5.55,5.56,5.61,6.01,6.02,6.2,6.03,6.21,6.30,6.30_sr1,6.31,6.40,6.60,6.61,7.00,2005,2006,2007; Upgrade f-secure f-secure_anti-virus_linux_client_security to a higher version than 5.52,and avoid the version (,5.52]; Upgrade f-secure f-secure_anti-virus_linux_server_security to a higher version than 5.52,and avoid the version (,5.52]; Upgrade f-secure f-secure_internet_security to a higher version than 2005,2006,2007,and avoid the version 2005,2006,2007; Upgrade f-secure internet_gatekeeper to a higher version than 6.61,2.06,2.14,2.15.484,2.16,and avoid the version (,6.61],2.06,2.14,2.15.484,2.16; Upgrade f-secure solutions_based_on_f-secure_personal_express to a higher version than 6.20,and avoid the version 6.20