Vulnerabilities > F Secure > Email AND Server Security

DATE CVE VULNERABILITY TITLE RISK
2023-11-27 CVE-2023-49321 Unspecified vulnerability in F-Secure products
Certain WithSecure products allow a Denial of Service because scanning a crafted file takes a long time, and causes the scanner to hang.
network
low complexity
f-secure
5.3
2023-11-27 CVE-2023-49322 Unspecified vulnerability in F-Secure products
Certain WithSecure products allow a Denial of Service because there is an unpack handler crash that can lead to a scanning engine crash.
network
low complexity
f-secure
7.5
2023-09-22 CVE-2023-43760 Unspecified vulnerability in F-Secure products
Certain WithSecure products allow Denial of Service via a fuzzed PE32 file.
network
low complexity
f-secure
7.5
2023-09-22 CVE-2023-43761 Infinite Loop vulnerability in F-Secure products
Certain WithSecure products allow Denial of Service (infinite loop).
network
low complexity
f-secure CWE-835
7.5
2023-09-22 CVE-2023-43765 Unspecified vulnerability in F-Secure products
Certain WithSecure products allow Denial of Service in the aeelf component.
network
low complexity
f-secure
7.5
2023-09-22 CVE-2023-43766 Unspecified vulnerability in F-Secure products
Certain WithSecure products allow Local privilege escalation via the lhz archive unpack handler.
local
low complexity
f-secure
7.8
2023-09-22 CVE-2023-43767 Unspecified vulnerability in F-Secure products
Certain WithSecure products allow Denial of Service via the aepack archive unpack handler.
network
low complexity
f-secure
7.5
2022-03-10 CVE-2021-44750 Unspecified vulnerability in F-Secure products
An arbitrary code execution vulnerability was found in the F-Secure Support Tool.
local
low complexity
f-secure
7.3
2020-02-22 CVE-2020-9342 Interpretation Conflict vulnerability in F-Secure products
The F-Secure AV parsing engine before 2020-02-05 allows virus-detection bypass via crafted Compression Method data in a GZIP archive.
local
low complexity
f-secure CWE-436
5.5