Description

A Denial-of-Service vulnerability was discovered in the F-Secure Atlant and in certain WithSecure products while scanning fuzzed PE32-bit files it is possible that can crash the scanning engine. The exploit can be triggered remotely by an attacker.

Related CPE's

a

f-secure

elements_endpoint_detection_and_response

Vulnerable

a

f-secure

elements_endpoint_protection

Vulnerable

o

apple

macos

-

o

microsoft

windows

-

a

f-secure

atlant

Vulnerable

a

f-secure

cloud_protection_for_salesforce

Vulnerable

a

f-secure

elements_collaboration_protection

Vulnerable

a

f-secure

internet_gatekeeper

Vulnerable

a

f-secure

linux_security

*

*

*

*

*

*

x86

Vulnerable

a

f-secure

linux_security_64

Vulnerable

References

https://www.f-secure.com/en/home/support/vulnerability-reward-program/hall-of-fame

Not ApplicableVendor Advisory

https://www.withsecure.com/en/expertise/people

Not ApplicableVendor Advisory

https://www.f-secure.com/en/home/support/vulnerability-reward-program/hall-of-fame

Not ApplicableVendor Advisory

https://www.withsecure.com/en/expertise/people

Not ApplicableVendor Advisory

Weaknesses

[email protected]

Primary
NVD-CWE-noinfo

CVSS impact metrics

CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:L/I:L/A:L

4.3 · Medium

Information

Source identifier

[email protected]

Vulnerability status

Modified

Published

2022-08-05T15:15:08.447Z

3 years ago

Last modified

2024-11-21T05:58:07.477Z

1 year ago