Vulnerabilities

Certain WithSecure products allow a Denial of Service because there is an unpack handler crash that can lead to a scanning engine crash.

Certain WithSecure products allow a Denial of Service because scanning a crafted file takes a long time, and causes the scanner to hang.

Certain WithSecure products allow Denial of Service via the aepack archive unpack handler.

Certain WithSecure products allow Local privilege escalation via the lhz archive unpack handler.

Certain WithSecure products allow Denial of Service in the aeelf component.

Certain WithSecure products allow Denial of Service (infinite loop).

Certain WithSecure products allow Denial of Service via a fuzzed PE32 file.

An arbitrary code execution vulnerability was found in the F-Secure Support Tool.

A Denial-of-Service (DoS) vulnerability was discovered in F-Secure Atlant whereby the SAVAPI component used in certain F-Secure products can crash while scanning fuzzed files.

In the F-Secure installer in F-Secure SAFE for Windows before 17.6, F-Secure Internet Security before 17.6, F-Secure Anti-Virus before 17.6, F-Secure Client Security Standard and Premium before 14.10, F-Secure PSB Workst…

Multiple F-Secure anti-virus products, including Anti-Virus for Microsoft Exchange 7.10 and earlier; Internet Gatekeeper for Windows 6.61 and earlier, Windows 6.61 and earlier, and Linux 2.16 and earlier; Internet Securi…