Unscored severity · published May 22, 2009
CVE-2009-1782
Multiple F-Secure anti-virus products, including Anti-Virus for Microsoft Exchange 7.10 and earlier; Internet Gatekeeper for Windows 6.61 and earlier, Windows 6.61 and earlier,…
–
CVSS
2.2%
EPSS
No
On KEV
Description
Multiple F-Secure anti-virus products, including Anti-Virus for Microsoft Exchange 7.10 and earlier; Internet Gatekeeper for Windows 6.61 and earlier, Windows 6.61 and earlier, and Linux 2.16 and earlier; Internet Security 2009 and earlier, Anti-Virus 2009 and earlier, Client Security 8.0 and earlier, and others; allow remote attackers to bypass malware detection via a crafted (1) ZIP and (2) RAR archive.
Exploitation
Is it being used?
Exploit prediction (EPSS)2.2% · higher than 82% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
AN
Anti-virus · F-secure
through 4.65; through 5.54; through 5.54; through 5.61; through 6.62; through 7.00; +5 more · source: NVD
CS
Client Security · F-secure
through 8.0 · source: NVD
HS
Home Server Security · F-secure
through 2009 · source: NVD
IG
Internet Gatekeeper · F-secure
through 2.16; through 3.01; through 6.61 · source: NVD
IS
Internet Security · F-secure
through 2009 · source: NVD
LS
Linux Security · F-secure
through 7.01; through 7.02 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2009-1782
CVE.org
https://www.cve.org/CVERecord?id=CVE-2009-1782
Vendor Advisory
http://secunia.com/advisories/35008
Patch
http://www.f-secure.com/en_EMEA/support/security-advisory/fsc-2009-1.html
www.securityfocus.com
http://www.securityfocus.com/bid/34849
www.securitytracker.com
http://www.securitytracker.com/id?1022170
www.securitytracker.com
http://www.securitytracker.com/id?1022171
www.securitytracker.com
http://www.securitytracker.com/id?1022172
More from Anti-virus
–
CVE-2013-7369
SQL injection vulnerability in an unspecified DLL in the FSDBCom ActiveX control in F-Secure Anti-Virus for Microsoft Exchange Server before HF02, Anti-Virus for Windows Servers…
–
CVE-2012-6646
F-Secure Anti-Virus, Safe Anywhere, and PSB Workstation Security before 11500 for Mac OS X allows local users to disable the Mac OS X firewall via unspecified vectors
–
CVE-2010-3499
F-Secure Anti-Virus does not properly interact with the processing of hcp:// URLs by the Microsoft Help and Support Center, which makes it easier for remote attackers to execute…
–
CVE-2012-1430
The ELF file parser in Bitdefender 7.2, Comodo Antivirus 7424, eSafe 7.0.17.0, F-Secure Anti-Virus 9.0.16160.0, McAfee Anti-Virus Scanning Engine 5.400.0.1158, McAfee Gateway…
–
CVE-2010-1425
F-Secure Internet Security 2010 and earlier; Anti-Virus for Microsoft Exchange 9 and earlier, and for MIMEsweeper 5.61 and earlier; Internet Gatekeeper for Windows 6.61 and…