NetSight
high7.8

CVE-2023-43766

Certain WithSecure products allow Local privilege escalation via the lhz archive unpack handler.

Impact

Certain WithSecure products allow Local privilege escalation via the lhz archive unpack handler. This affects WithSecure Client Security 15, WithSecure Server Security 15, WithSecure Email and Server Security 15, WithSecure Elements Endpoint Protection 17 and later, WithSecure Client Security for Mac 15, WithSecure Elements Endpoint Protection for Mac 17 and later, Linux Security 64 12.0 , Linux Protection 12.0, and WithSecure Atlant (formerly F-Secure Atlant) 1.0.35-1.

Affected products

VendorProductAffected versions
F-SecureLinux Protection
Version 12.0
F-SecureLinux Security 64
Version 12.0
F-SecureAtlant
Version 1.0.35-1
F-SecureClient Security
Version 15.00
F-SecureElements Endpoint Protection
from 17.0
F-SecureEmail And Server Security
Version 15.00
F-SecureServer Security
Version 15.00

Weakness classification

References