medium4.6
CVE-2021-40837
A vulnerability affecting F-Secure antivirus engine before Capricorn update 2022-02-01_01 was discovered whereby decompression of ACE file causes the scanner s…
Impact
A vulnerability affecting F-Secure antivirus engine before Capricorn update 2022-02-01_01 was discovered whereby decompression of ACE file causes the scanner service to stop. The vulnerability can be exploited remotely by an attacker. A successful attack will result in denial-of-service of the antivirus engine.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| F-Secure | Atlant | before 2022-02-01_01 |
| F-Secure | Internet Gatekeeper | before 2022-02-01_01 |
| F-Secure | Linux Security | before 2022-02-01_01 |
| F-Secure | Security Cloud | before 2022-02-01_01 |
| F-Secure | Elements Endpoint Detection And Response | before 2022-02-01_01 |
| F-Secure | Elements Endpoint Protection | before 2022-02-01_01 |
References
- NVD record
- CVE.org record
- https://www.f-secure.com/en/business/support-and-downloads/security-advisories
- https://www.f-secure.com/en/business/support-and-downloads/security-advisories/cve-2021-40837
- https://www.f-secure.com/en/business/support-and-downloads/security-advisories
- https://www.f-secure.com/en/business/support-and-downloads/security-advisories/cve-2021-40837