EUVD-2017-15523

Malware in sbrugna...

CVE-2017-6466: Improper Input Validation

F-Secure Software Updater 2.20, as distributed in several F-Secure products, downloads installation packages over plain http and does not perform file integrity validation after download. Man-in-the-middle attackers can replace the file with their own executable which will be executed under the...

PT-2017-17086

Name of the Vulnerable Software and Affected Versions F-Secure Software Updater version 2.20 Description The issue allows man-in-the-middle attackers to replace downloaded files with their own executable, which will be executed under the SYSTEM account. This is because the software downloads...