F-Secure Policy Manager Server fsmsh.dll module DoS

The remote host is running a version a F-Secure Policy Manager Server that is vulnerable to a denial of service. A malicious user can forge a request to query a MS-DOS device name through the 'fsmsh.dll' CGI module, which will prevent legitimate users from accessing the service using the Manager...

F-Secure Antivirus buffer overflow

Buffer overflow on LZH archives parsing. Infinite loop on ARJ and FSG parsing...

n.runs-SA-2007.014 - F-Secure Antivirus ARJ parsing Infinite Loop Advisory

n.runs AG http://www.nruns.com/ securityatnruns.com n.runs-SA-2007.014 04-Jun-2007 Vendor: F-Secure Corporation, http://www.f-secure.com Affected Products: F-Secure Anti-Virus for Workstations version 7.00 and earlier F-Secure Anti-Virus for Windows Servers version 7.00 and earlier F-Secure...

n.runs-SA-2007.013 - F-Secure Antivirus LZH parsing BufferOverflow Advisory

n.runs AG http://www.nruns.com/ securityatnruns.com n.runs-SA-2007.013 01-Jun-2007 Vendor: F-Secure Corporation, http://www.f-secure.com Affected Products: F-Secure Anti-Virus for Workstations version 5.44 and earlier F-Secure Anti-Virus for Windows Servers version 5.52 and earlier F-Secure...

F-Secure Policy Manager fsmsh.dll程拒绝服务漏洞

F-Secure Policy Manager是基于WEB的策略管理器。 F-Secure Policy Manager服务器的fsmsh.dll主机模块存在安全漏洞，允许远程攻击者通过将NTFS保留的名称指定为URL文件名导致拒绝服务。 但由于该产品主要在企业内网使用，因此不太可能通过Internet发动攻击。 F-Secure Policy Manager = 7.00 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载： http://www.f-secure.com/security/fsc-2007-4.shtml...

CVE-2007-2967

Multiple F-Secure anti-virus products for Microsoft Windows and Linux before 20070522 allow remote attackers to cause a denial of service file scanning infinite loop via certain crafted 1 ARJ archives or 2 FSG packed files...

Design/Logic Flaw

Buffer overflow in the LHA decompression component in F-Secure anti-virus products for Microsoft Windows and Linux before 20070529 allows remote attackers to execute arbitrary code or cause a denial of service application crash via a crafted LHA archive, related to an integer wrap, a similar issu...

Design/Logic Flaw

Multiple F-Secure anti-virus products for Microsoft Windows and Linux before 20070522 allow remote attackers to cause a denial of service file scanning infinite loop via certain crafted 1 ARJ archives or 2 FSG packed files...

CVE-2007-2965

Unspecified vulnerability in the Real-time Scanning component in multiple F-Secure products, including Internet Security 2005, 2006 and 2007; Anti-Virus 2005, 2006 and 2007; and Solutions based on F-Secure Protection Service for Consumers 6.40 and earlier allows local users to gain privileges via...

CVE-2007-2966

Buffer overflow in the LHA decompression component in F-Secure anti-virus products for Microsoft Windows and Linux before 20070529 allows remote attackers to execute arbitrary code or cause a denial of service application crash via a crafted LHA archive, related to an integer wrap, a similar issu...

Input validation

Unspecified vulnerability in the Real-time Scanning component in multiple F-Secure products, including Internet Security 2005, 2006 and 2007; Anti-Virus 2005, 2006 and 2007; and Solutions based on F-Secure Protection Service for Consumers 6.40 and earlier allows local users to gain privileges via...

CVE-2007-2964

The fsmsh.dll host module in F-Secure Policy Manager Server 7.00 and earlier allows remote attackers to cause a denial of service application crash via NTFS reserved words in filenames in URLs...

CVE-2007-2965

CVE-2007-2965 concerns the Real-time Scanning component across multiple F-Secure products (Internet Security 2005–2007, Anti-Virus 2005–2007, and related Protection Service for Consumers 6.40 and earlier). The root cause is improper validation in IOCTL/I/O space handling, allowing a crafted I/O r...

CVE-2007-2964

The CVE concerns F-Secure Policy Manager Server (7.00 and earlier) where the fsmsh.dll host module can be triggered to cause a denial of service (application crash) by sending URLs containing NTFS reserved words. The vulnerability is a DoS condition affecting the server via the fsmsh.dll CGI modu...

CVE-2007-2967

Multiple F-Secure anti-virus products for Microsoft Windows and Linux before 20070522 allow remote attackers to cause a denial of service file scanning infinite loop via certain crafted 1 ARJ archives or 2 FSG packed files...

CVE-2007-2967

The CVE-2007-2967 entry affects multiple F‑Secure antivirus products for Windows and Linux prior to 20070522. The vulnerability is a denial of service via crafted ARJ archives or FSG packed files that can cause a file-scanning infinite loop within the scanner component. Impact is a complete denia...

CVE-2007-2966

Buffer overflow in the LHA decompression component in F-Secure anti-virus products for Microsoft Windows and Linux before 20070529 allows remote attackers to execute arbitrary code or cause a denial of service application crash via a crafted LHA archive, related to an integer wrap, a similar issu...

CVE-2007-2964

The fsmsh.dll host module in F-Secure Policy Manager Server 7.00 and earlier allows remote attackers to cause a denial of service application crash via NTFS reserved words in filenames in URLs...

CVE-2007-2965

Unspecified vulnerability in the Real-time Scanning component in multiple F-Secure products, including Internet Security 2005, 2006 and 2007; Anti-Virus 2005, 2006 and 2007; and Solutions based on F-Secure Protection Service for Consumers 6.40 and earlier allows local users to gain privileges via...

CVE-2007-2966

CVE-2007-2966 describes a buffer overflow in the LHA decompression component of F-Secure antivirus products for Windows and Linux (pre-20070529). The flaw is triggered by a crafted LHA archive and is tied to an integer wrap issue, enabling remote attackers to potentially execute arbitrary code or...