« Volver al listado

CVE-2009-1783

Estado: ModificadaAlta (10)—

Multiple FRISK Software F-Prot anti-virus products, including Antivirus for Exchange, Linux on IBM zSeries, Linux x86 File Servers, Linux x86 Mail Servers, Linux x86 Workstations, Solaris Mail Servers, Antivirus for Windows, and others, allow remote attackers to bypass malware detection via a crafted CAB archive.

CVSS

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

Tecnologías afectadas (3)

F-prot — F-prot AntivirusF-prot — F-prot AvesF-prot — F-prot Milter

CWE

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2009-1783",
  "cveTags": [],
  "metrics": {
    "cvssMetricV2": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "version": "2.0",
          "baseScore": 10,
          "accessVector": "NETWORK",
          "vectorString": "AV:N/AC:L/Au:N/C:C/I:C/A:C",
          "authentication": "NONE",
          "integrityImpact": "COMPLETE",
          "accessComplexity": "LOW",
          "availabilityImpact": "COMPLETE",
          "confidentialityImpact": "COMPLETE"
        },
        "acInsufInfo": false,
        "impactScore": 10,
        "baseSeverity": "HIGH",
        "obtainAllPrivilege": false,
        "exploitabilityScore": 10,
        "obtainUserPrivilege": false,
        "obtainOtherPrivilege": false,
        "userInteractionRequired": false
      }
    ]
  },
  "affected": [
    {
      "source": "cve@mitre.org",
      "affectedData": [
        {
          "vendor": "n/a",
          "product": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ]
    }
  ],
  "published": "2009-05-22T20:30:00.907",
  "references": [
    {
      "url": "http://blog.zoller.lu/2009/04/advisory-f-prot-frisk-cab-bypass.html",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://www.securityfocus.com/archive/1/503393/100/0/threaded",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://www.securityfocus.com/bid/34896",
      "source": "cve@mitre.org"
    },
    {
      "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/50427",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://blog.zoller.lu/2009/04/advisory-f-prot-frisk-cab-bypass.html",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.securityfocus.com/archive/1/503393/100/0/threaded",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.securityfocus.com/bid/34896",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/50427",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    }
  ],
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "type": "Primary",
      "source": "nvd@nist.gov",
      "description": [
        {
          "lang": "en",
          "value": "CWE-20"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "Multiple FRISK Software F-Prot anti-virus products, including Antivirus for Exchange, Linux on IBM zSeries, Linux x86 File Servers, Linux x86 Mail Servers, Linux x86 Workstations, Solaris Mail Servers, Antivirus for Windows, and others, allow remote attackers to bypass malware detection via a crafted CAB archive."
    },
    {
      "lang": "es",
      "value": "Múltiples productos antivirus FRISK Software F-Prot, incluidos: Antivirus for Exchange, Linux on IBM zSeries, Linux x86 File Servers, Linux x86 Mail Servers, Linux x86 Workstations, Solaris Mail Servers, Antivirus for Windows y otros, permiten a atacantes remotos saltar la detección de software malicioso mediante un fichero .CAB manipulado."
    }
  ],
  "lastModified": "2026-06-16T23:08:03.047",
  "configurations": [
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:f-prot:f-prot_antivirus:*:exchange:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "E235C40F-068D-4529-910B-DFFC78D3E8B2"
            },
            {
              "criteria": "cpe:2.3:a:f-prot:f-prot_antivirus:*:linux_on_ibm_zseries:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "EEF8C31A-2B41-41F2-91A3-2F16DE5B4119"
            },
            {
              "criteria": "cpe:2.3:a:f-prot:f-prot_antivirus:*:linux_x86_file_servers:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "44F21EE4-5335-41D0-AB4B-CA36137772F9"
            },
            {
              "criteria": "cpe:2.3:a:f-prot:f-prot_antivirus:*:linux_x86_mail_servers:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "EC65F491-E7B3-405F-B734-6AB4DA175735"
            },
            {
              "criteria": "cpe:2.3:a:f-prot:f-prot_antivirus:*:linux_x86_workstations:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "5B4C47DB-7B40-4322-B41C-16F7FFC888BD"
            },
            {
              "criteria": "cpe:2.3:a:f-prot:f-prot_antivirus:*:solaris_mail_servers:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "866B0D8C-6F5E-48A0-B891-C41B2A33DD15"
            },
            {
              "criteria": "cpe:2.3:a:f-prot:f-prot_antivirus:*:windows:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "BCAF39F4-835D-4BAF-ACE3-3C39625EBBFC"
            },
            {
              "criteria": "cpe:2.3:a:f-prot:f-prot_antivirus:*:windows_mail_servers:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "8AE486C5-CCE9-49EF-B8A3-FEF0BB0137AB"
            },
            {
              "criteria": "cpe:2.3:a:f-prot:f-prot_aves:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "C33C37C9-BC92-4BB4-AF0C-264384A63190"
            },
            {
              "criteria": "cpe:2.3:a:f-prot:f-prot_milter:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "E6D5B56C-C89D-42B4-BEB9-297C1DC0497B"
            }
          ],
          "operator": "OR"
        }
      ]
    }
  ],
  "sourceIdentifier": "cve@mitre.org"
}