F-secure
F-secure Internet Gatekeeper: vulnerabilidades y CVE
F-secure Internet Gatekeeper tiene 46 vulnerabilidades publicadas, 0 de ellas en los últimos 12 meses. 0 son críticas y 0 figuran en el catálogo de explotación activa de CISA.
CVE46
Últimos 12 meses0
Críticas0
Explotadas activamente0
Todas las vulnerabilidades en el catálogo →⭐ Seguir esta tecnología
Últimas vulnerabilidades
| CVE | Severidad | EPSS | Explotación activa | Publicada | Descripción |
|---|---|---|---|---|---|
| CVE-2022-28887 | Alta (7.5) | 0.40% | — | 12 oct 2022 | Multiple Denial-of-Service (DoS) vulnerability was discovered in F-Secure & WithSecure products whereby the aerdl.dll unpacker handler function crashes. This can lead to a possible scanning engine crash. |
| CVE-2022-28886 | Media (5.5) | 0.47% | — | 23 sept 2022 | A Denial-of-Service vulnerability was discovered in the F-Secure and WithSecure products where aerdl.so/aerdl.dll may go into an infinite loop when unpacking PE files. It is possible that this can crash the scanning… |
| CVE-2022-28884 | Alta (7.5) | 0.47% | — | 6 sept 2022 | A Denial-of-Service vulnerability was discovered in the F-Secure and WithSecure products where aerdl.dll may go into an infinite loop when unpacking PE files. It is possible that this can crash the scanning engine. |
| CVE-2022-28883 | Alta (7.5) | 0.59% | — | 23 ago 2022 | A Denial-of-Service (DoS) vulnerability was discovered in F-Secure & WithSecure products whereby the aerdl unpack function crashes. This can lead to a possible scanning engine crash. The exploit can be triggered… |
| CVE-2022-28882 | Alta (7.5) | 0.44% | — | 23 ago 2022 | A Denial-of-Service (DoS) vulnerability was discovered in F-Secure & WithSecure products whereby the aegen.dll will go into an infinite loop when unpacking PE files. This eventually leads to scanning engine crash. The… |
| CVE-2022-28881 | Alta (7.5) | 0.47% | — | 10 ago 2022 | A Denial-of-Service (DoS) vulnerability was discovered in F-Secure Atlant whereby the aerdl.dll component used in certain WithSecure products unpacker function crashes which leads to scanning engine crash. The exploit… |
| CVE-2022-28880 | Alta (7.5) | 0.48% | — | 5 ago 2022 | A Denial-of-Service vulnerability was discovered in the F-Secure Atlant and in certain WithSecure products while scanning fuzzed PE32-bit files it is possible that can crash the scanning engine. The exploit can be… |
| CVE-2022-28879 | Alta (7.5) | 0.46% | — | 22 jul 2022 | A Denial-of-Service (DoS) vulnerability was discovered in F-Secure Atlant and in certain WithSecure products whereby the scanning the aepack.dll component can crash the scanning engine. |
| CVE-2022-28878 | Alta (7.5) | 0.45% | — | 22 jul 2022 | A Denial-of-Service vulnerability was discovered in the F-Secure Atlant and in certain WithSecure products while scanning fuzzed APK file it is possible that can crash the scanning engine. |
| CVE-2022-28876 | Alta (7.5) | 0.47% | — | 14 jul 2022 | A Denial-of-Service (DoS) vulnerability was discovered in F-Secure Atlant and in certain WithSecure products whereby the scanning the aeheur.dll component can crash the scanning engine. The exploit can be triggered… |
| CVE-2022-28875 | Media (6.5) | 0.54% | — | 25 may 2022 | A Denial-of-Service (DoS) vulnerability was discovered in F-Secure Atlant and in certain WithSecure products whereby the scanning the aemobile component can crash the scanning engine. The exploit can be triggered… |
| CVE-2021-44747 | Media (6.5) | 0.63% | — | 1 mar 2022 | A Denial-of-Service (DoS) vulnerability was discovered in F-Secure Linux Security whereby the Fmlib component used in certain F-Secure products can crash while scanning fuzzed files. The exploit can be triggered… |
| CVE-2021-40837 | Media (5.3) | 0.66% | — | 9 feb 2022 | A vulnerability affecting F-Secure antivirus engine before Capricorn update 2022-02-01_01 was discovered whereby decompression of ACE file causes the scanner service to stop. The vulnerability can be exploited remotely… |
| CVE-2021-40836 | Media (5.5) | 0.46% | — | 22 dic 2021 | A vulnerability affecting F-Secure antivirus engine was discovered whereby scanning MS outlook .pst files can lead to denial-of-service. The vulnerability can be exploited remotely by an attacker. A successful attack… |
| CVE-2021-40833 | Media (5.5) | 0.41% | — | 26 nov 2021 | A vulnerability affecting F-Secure antivirus engine was discovered whereby unpacking UPX file can lead to denial-of-service. The vulnerability can be exploited remotely by an attacker. A successful attack will result in… |
| CVE-2021-40832 | Media (6.5) | 0.56% | — | 8 oct 2021 | A Denial-of-Service (DoS) vulnerability was discovered in F-Secure Atlant whereby the AVRDL unpacking module component used in certain F-Secure products can crash while scanning a fuzzed files. The exploit can be… |
| CVE-2021-33603 | Media (6.5) | 0.56% | — | 8 oct 2021 | A Denial-of-Service (DoS) vulnerability was discovered in F-Secure Atlant whereby the AVPACK module component used in certain F-Secure products can crash while scanning a fuzzed files. The exploit can be triggered… |
| CVE-2021-33602 | Media (5.3) | 0.60% | — | 6 oct 2021 | A vulnerability affecting the F-Secure Antivirus engine was discovered when the engine tries to unpack a zip archive (LZW decompression method), and this can crash the scanning engine. The vulnerability can be exploited… |
| CVE-2021-33601 | Alta (8.8) | 0.94% | — | 28 sept 2021 | A vulnerability was discovered in the web user interface of F-Secure Internet Gatekeeper. An authenticated user can modify settings through the web user interface in a way that could lead to an arbitrary code execution… |
| CVE-2021-33600 | Alta (7.5) | 0.61% | — | 28 sept 2021 | A denial-of-service (DoS) vulnerability was discovered in the web user interface of F-Secure Internet Gatekeeper. The vulnerability occurs because of an attacker can trigger assertion via malformed HTTP packet to web… |
| CVE-2020-9342 | Media (5.5) | 1.6% | — | 22 feb 2020 | The F-Secure AV parsing engine before 2020-02-05 allows virus-detection bypass via crafted Compression Method data in a GZIP archive. This affects versions before 17.0.605.474 (on Linux) of Cloud Protection For… |
| CVE-2011-0453 | Media (5) | 2.3% | — | 18 feb 2011 | F-Secure Internet Gatekeeper for Linux 3.x before 3.03 does not require authentication for reading access logs, which allows remote attackers to obtain potentially sensitive information via a TCP session on the admin UI… |
| CVE-2010-1425 | Media (5) | 2.2% | — | 15 abr 2010 | F-Secure Internet Security 2010 and earlier; Anti-Virus for Microsoft Exchange 9 and earlier, and for MIMEsweeper 5.61 and earlier; Internet Gatekeeper for Windows 6.61 and earlier, and for Linux 4.02 and earlier;… |
| CVE-2009-1782 | Media (6.8) | 2.2% | — | 22 may 2009 | Multiple F-Secure anti-virus products, including Anti-Virus for Microsoft Exchange 7.10 and earlier; Internet Gatekeeper for Windows 6.61 and earlier, Windows 6.61 and earlier, and Linux 2.16 and earlier; Internet… |
| CVE-2007-3300 | Alta (9.3) | 3.7% | — | 20 jun 2007 | Multiple F-Secure anti-virus products for Microsoft Windows and Linux before 20070619 allow remote attackers to bypass scanning via a crafted header in a (1) LHA or (2) RAR archive. |
| CVE-2007-2966 | Alta (7.5) | 5.2% | — | 31 may 2007 | Buffer overflow in the LHA decompression component in F-Secure anti-virus products for Microsoft Windows and Linux before 20070529 allows remote attackers to execute arbitrary code or cause a denial of service… |
| CVE-2007-2965 | Alta (7.2) | 0.35% | — | 31 may 2007 | Unspecified vulnerability in the Real-time Scanning component in multiple F-Secure products, including Internet Security 2005, 2006 and 2007; Anti-Virus 2005, 2006 and 2007; and Solutions based on F-Secure Protection… |
| CVE-2007-2967 | Alta (10) | 4.8% | — | 31 may 2007 | Multiple F-Secure anti-virus products for Microsoft Windows and Linux before 20070522 allow remote attackers to cause a denial of service (file scanning infinite loop) via certain crafted (1) ARJ archives or (2) FSG… |
| CVE-2006-2838 | Alta (7.6) | 5.7% | — | 6 jun 2006 | Buffer overflow in the web console in F-Secure Anti-Virus for Microsoft Exchange 6.40, and Internet Gatekeeper 6.40 through 6.42 and 6.50 allows remote attackers to cause a denial of service (crash) and possibly execute… |
| CVE-2006-0338 | Media (5) | 3.0% | — | 21 ene 2006 | Multiple F-Secure Anti-Virus products and versions for Windows and Linux, including Anti-Virus for Windows Servers 5.52 and earlier, Internet Security 2004, 2005 and 2006, and Anti-Virus for Linux Servers 4.64 and… |