Vulnerabilities

WithSecure Elements Endpoint Protection Link Following Local Privilege Escalation Vulnerability.

Certain WithSecure products allow Local Privilege Escalation.

Certain WithSecure products allow Local Privilege Escalation.

Certain WithSecure products have a buffer over-read whereby processing certain fuzz file types may cause a denial of service (DoS).

Certain WithSecure products allow a Denial of Service (DoS) in the antivirus engine when scanning a fuzzed PE32 file.

Certain WithSecure products allow a remote crash of a scanning engine via decompression of crafted data files.

Certain WithSecure products allow an infinite loop in a scanning engine via unspecified file types.

Certain WithSecure products allow an infinite loop in a scanning engine via unspecified file types.

Certain WithSecure products allow a remote crash of a scanning engine via unpacking of a PE file.

Certain WithSecure products allow a remote crash of a scanning engine via processing of an import struct in a PE file.

Certain WithSecure products allow a remote crash of a scanning engine via processing of a compressed file.

Certain WithSecure products allow a remote crash of a scanning engine via unpacking of crafted data files.

A Denial-of-Service vulnerability was discovered in the F-Secure and WithSecure products where aerdl.dll may go into an infinite loop when unpacking PE files.