Description

A Denial-of-Service vulnerability was discovered in the F-Secure Atlant and in certain WithSecure products while scanning fuzzed PE32-bit files it is possible that can crash the scanning engine. The exploit can be triggered remotely by an attacker.

Related CPE's

a

f-secure

elements_endpoint_detection_and_response

Vulnerable

a

f-secure

elements_endpoint_protection

Vulnerable

o

apple

macos

-

o

microsoft

windows

-

a

f-secure

atlant

Vulnerable

a

f-secure

cloud_protection_for_salesforce

Vulnerable

a

f-secure

elements_collaboration_protection

Vulnerable

a

f-secure

internet_gatekeeper

Vulnerable

a

f-secure

linux_security

*

*

*

*

*

*

x86

Vulnerable

a

f-secure

linux_security_64

Vulnerable

References

https://www.f-secure.com/en/home/support/vulnerability-reward-program/hall-of-fame

Not ApplicableVendor Advisory

https://www.withsecure.com/en/expertise/people

Not ApplicableVendor Advisory

Weaknesses

[email protected]

Primary
NVD-CWE-noinfo

CVSS impact metrics

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

7.5 · High

  • CVSS V3.1

  • CVSS V3.0

  • CVSS V2.0

Information

Source identifier

[email protected]

Vulnerability status

Analyzed

Published

2022-08-05T17:15:08.447

2 years ago

Last modified

2022-08-15T23:06:54.060

2 years ago