PT-2023-28391

Name of the Vulnerable Software and Affected Versions WithSecure Client Security version 15 WithSecure Server Security version 15 WithSecure Email and Server Security version 15 WithSecure Elements Endpoint Protection versions 17 and later WithSecure Client Security for Mac version 15 WithSecure...

PT-2023-28387

Name of the Vulnerable Software and Affected Versions WithSecure Client Security version 15 WithSecure Server Security version 15 WithSecure Email and Server Security version 15 WithSecure Elements Endpoint Protection versions 17 and later WithSecure Client Security for Mac version 15 WithSecure...

PT-2023-28388

Name of the Vulnerable Software and Affected Versions WithSecure Client Security version 15 WithSecure Server Security version 15 WithSecure Email and Server Security version 15 WithSecure Elements Endpoint Protection versions 17 and later WithSecure Client Security for Mac version 15 WithSecure...

PT-2023-28389

Name of the Vulnerable Software and Affected Versions WithSecure Client Security versions 15 WithSecure Server Security versions 15 WithSecure Email and Server Security versions 15 WithSecure Elements Endpoint Protection versions 17 and later WithSecure Client Security for Mac versions 15...

CVE-2023-42521

CVE-2023-42521 affects multiple WithSecure products (Client Security, Server Security, Email and Server Security, Elements Endpoint Protection, and Underlying Linux 64/12.0, plus Mac variants and WithSecure Atlant 1.0.35-1) where processing compressed files can cause a remote crash of the scannin...

CVE-2023-42521: Uncontrolled Resource Consumption

Certain WithSecure products allow a remote crash of a scanning engine via processing of a compressed file. This affects WithSecure Client Security 15, WithSecure Server Security 15, WithSecure Email and Server Security 15, WithSecure Elements Endpoint Protection 17 and later, WithSecure Client...

CVE-2023-42525: Loop with Unreachable Exit Condition

Certain WithSecure products allow an infinite loop in a scanning engine via unspecified file types. This affects WithSecure Client Security 15, WithSecure Server Security 15, WithSecure Email and Server Security 15, WithSecure Elements Endpoint Protection 17 and later, WithSecure Client Security...

CVE-2023-42522: Uncontrolled Resource Consumption

Certain WithSecure products allow a remote crash of a scanning engine via processing of an import struct in a PE file. This affects WithSecure Client Security 15, WithSecure Server Security 15, WithSecure Email and Server Security 15, WithSecure Elements Endpoint Protection 17 and later, WithSecu...

CVE-2023-42520: Uncontrolled Resource Consumption

Certain WithSecure products allow a remote crash of a scanning engine via unpacking of crafted data files. This affects WithSecure Client Security 15, WithSecure Server Security 15, WithSecure Email and Server Security 15, WithSecure Elements Endpoint Protection 17 and later, WithSecure Client...

CVE-2023-42526: Uncontrolled Resource Consumption

Certain WithSecure products allow a remote crash of a scanning engine via decompression of crafted data files. This affects WithSecure Client Security 15, WithSecure Server Security 15, WithSecure Email and Server Security 15, WithSecure Elements Endpoint Protection 17 and later, WithSecure Clien...

CVE-2023-42524: Loop with Unreachable Exit Condition

Certain WithSecure products allow an infinite loop in a scanning engine via unspecified file types. This affects WithSecure Client Security 15, WithSecure Server Security 15, WithSecure Email and Server Security 15, WithSecure Elements Endpoint Protection 17 and later, WithSecure Client Security...

CVE-2023-42523: Uncontrolled Resource Consumption

Certain WithSecure products allow a remote crash of a scanning engine via unpacking of a PE file. This affects WithSecure Client Security 15, WithSecure Server Security 15, WithSecure Email and Server Security 15, WithSecure Elements Endpoint Protection 17 and later, WithSecure Client Security fo...

CVE-2023-42525

CVE-2023-42525 affects multiple WithSecure products (Client Security, Server Security, Email and Server Security, Elements Endpoint Protection, and Linux variants) and Atlan; root cause is an infinite loop in the antivirus/scan engine when parsing certain file types. Impact is an infinite loop, l...

Lazarus Group's infrastructure reuse leads to discovery of new malware

In the Lazarus Groups latest campaign, which we detailed in a recent blog, the North Korean state-sponsored actor is exploiting CVE-2022-47966, a ManageEngine ServiceDesk vulnerability to deploy multiple threats. In addition to their "QuiteRAT" malware, which we covered in the blog, we also...

Post-Macro World Sees Rise in Microsoft OneNote Documents Delivering Malware

In a continuing sign that threat actors are adapting well to a post-macro world, it has emerged that the use of Microsoft OneNote documents to deliver malware via phishing attacks is on the rise. Some of the notable malware families that are being distributed using this method include AsyncRAT,...

The vulnerability of the cloud-based artificial intelligence-based endpoint protection platform, WithSecure Elements Endpoint Protection (EPP), is related to improper handling of the search path, allowing a hacker to trigger a service failure.

The vulnerability of WithSecure Elements Endpoint Protection is related to improper handling of the path to the aerdl.dll library. Exploiting this vulnerability can allow a malicious actor to cause service interruptions remotely...

Mikko Hypponen’s opinion on the technological revolution

By Owais Sultan Mikko Hypponen, Chief Research Officer at WithSecure Formerly F-Secure, is considered one of the best cybersecurity speakers in… This is a post from HackRead.com Read the original post: Mikko Hypponens opinion on the technological revolution...

CVE-2022-45871

A Denial-of-Service DoS vulnerability was discovered in the fsicapd component used in WithSecure products whereby the service may crash while parsing ICAP request. The exploit can be triggered remotely by an attacker...

Denial of service

A Denial-of-Service DoS vulnerability was discovered in the fsicapd component used in WithSecure products whereby the service may crash while parsing ICAP request. The exploit can be triggered remotely by an attacker...

WithSecure products 安全漏洞

WithSecure products is a line of security software from the Finnish company WithSecure. A security vulnerability exists in WithSecure that stems from a denial-of-service DoS vulnerability found in the fsicapd component, which could cause the service to crash while parsing ICAP requests...