Unscored severity · published Apr 15, 2010
CVE-2010-1425
F-Secure Internet Security 2010 and earlier; Anti-Virus for Microsoft Exchange 9 and earlier, and for MIMEsweeper 5.61 and earlier; Internet Gatekeeper for Windows 6.61 and…
–
CVSS
2.2%
EPSS
No
On KEV
Description
F-Secure Internet Security 2010 and earlier; Anti-Virus for Microsoft Exchange 9 and earlier, and for MIMEsweeper 5.61 and earlier; Internet Gatekeeper for Windows 6.61 and earlier, and for Linux 4.02 and earlier; Anti-Virus 2010 and earlier; Home Server Security 2009; Protection Service for Consumers 9 and earlier, for Business - Workstation security 9 and earlier, for Business - Server Security 8 and earlier, and for E-mail and Server security 9 and earlier; Mac Protection build 8060 and earlier; Client Security 9 and earlier; and various Anti-Virus products for Windows, Linux, and Citrix; does not properly detect malware in crafted (1) 7Z, (2) GZIP, (3) CAB, or (4) RAR archives, which makes it easier for remote attackers to avoid detection.
Exploitation
Is it being used?
Exploit prediction (EPSS)2.2% · higher than 82% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
AN
Anti-virus · F-secure
through 9.00; 6.62; 7.0; 7.10 · source: NVD
FA
F-secure Anti-virus · F-secure
through 2010; 2.16; 2.16; 4.50; 4.50; 4.50_hotfix_1; +34 more · source: NVD
FA
F-secure Anti-virus Client Security · F-secure
6.03; 6.04; 7.01; 7.10 · source: NVD
FA
F-secure Anti-virus For Citrix Servers · F-secure
7.00 · source: NVD
FA
F-secure Anti-virus For Linux · F-secure
4.65 · source: NVD
FA
F-secure Anti-virus For Microsoft Exchange · F-secure
6.62; 7.00; 7.10 · source: NVD
FA
F-secure Anti-virus For Mimesweeper · F-secure
5.61 · source: NVD
FA
F-secure Anti-virus For Windows Servers · F-secure
8.00 · source: NVD
FA
F-secure Anti-virus For Workstations · F-secure
5.44; 7.00; 7.10; 7.11 · source: NVD
FA
F-secure Anti-virus Linux Client Security · F-secure
5.30; 5.52; 5.53; 5.54 · source: NVD
FA
F-secure Anti-virus Linux Server Security · F-secure
5.30; 5.52; 5.54 · source: NVD
FI
F-secure Internet Security · F-secure
through 2010; 7.02; 2003; 2004; 2005; 2006; +5 more · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2010-1425
CVE.org
https://www.cve.org/CVERecord?id=CVE-2010-1425
Vendor Advisory
http://secunia.com/advisories/39396
Patch
http://www.f-secure.com/en_EMEA/support/security-advisory/fsc-2010-1.html
www.securitytracker.com
http://www.securitytracker.com/id?1023841
www.securitytracker.com
http://www.securitytracker.com/id?1023842
www.securitytracker.com
http://www.securitytracker.com/id?1023843
Patch
http://www.vupen.com/english/advisories/2010/0855
More from Anti-virus
–
CVE-2013-7369
SQL injection vulnerability in an unspecified DLL in the FSDBCom ActiveX control in F-Secure Anti-Virus for Microsoft Exchange Server before HF02, Anti-Virus for Windows Servers…
–
CVE-2012-6646
F-Secure Anti-Virus, Safe Anywhere, and PSB Workstation Security before 11500 for Mac OS X allows local users to disable the Mac OS X firewall via unspecified vectors
–
CVE-2010-3499
F-Secure Anti-Virus does not properly interact with the processing of hcp:// URLs by the Microsoft Help and Support Center, which makes it easier for remote attackers to execute…
–
CVE-2012-1430
The ELF file parser in Bitdefender 7.2, Comodo Antivirus 7424, eSafe 7.0.17.0, F-Secure Anti-Virus 9.0.16160.0, McAfee Anti-Virus Scanning Engine 5.400.0.1158, McAfee Gateway…
–
CVE-2009-1782
Multiple F-Secure anti-virus products, including Anti-Virus for Microsoft Exchange 7.10 and earlier; Internet Gatekeeper for Windows 6.61 and earlier, Windows 6.61 and earlier,…