Scan bypass vulnerabilities in handling of specially crafted LHA and RAR archives (June 19, 2007)

Several F-Secure products are affected by archive file scan bypass vulnerabilities:

• user decompressable, crafted RAR archives cannot be parsed (opened) by Anti-Virus
• user decompressable, crafted LHA archives cannot be parsed (opened) by Anti-Virus

These issues have been fixed automatically in F-Secure database updates. This applies all the affected product versions with the exception of deployments not using automatic or automated scripts for the updates.

For more information, please see F-Secure Security Bulletin FSC-2007-5.