CVE-2021-40837

The CVE-2021-40837 issue affects the F-Secure antivirus engine prior to Capricorn update 2022-02-01_01. The vulnerability arises during ACE file decompression, triggering a denial-of-service condition where the scanner service stops. It can be exploited remotely by an attacker, leading to availab...

CVE-2022-28886

CVE-2022-28886 affects F-Secure and WithSecure products. The aerdl.so/aerdl.dll component may enter an infinite loop while unpacking PE files, potentially crashing the scanning engine. The available sources indicate a DoS impact without detailing affected versions or a published fix in the provid...

CVE-2021-33602

The CVE-2021-33602 issue affects the F-Secure Antivirus engine, where unpacking a ZIP archive via LZW decompression can crash the scanning engine. Exploitation is described as remote and can result in Denial-of-Service of the antivirus engine. Supported sources (Red Hat, NVD, CVE lists, CNNVD) co...

CVE-2021-33599

The CVE-2021-33599 issue concerns the F-Secure Antivirus engine. The documented vulnerability arises when scanning WIM archive files, which can cause an infinite loop or other conditions that freeze the AV engine, leading to a Denial-of-Service. Exploitation is described as remote, with a success...

CVE-2021-40836

The CVE-2021-40836 entry describes a DoS in the F-Secure antivirus engine when scanning MS Outlook .pst files. Vulnerability can be exploited remotely, leading to availability impact (partial) of the antivirus engine. Connected sources confirm the affected product (F-Secure antivirus engine) and ...

CVE-2021-33597

CVE-2021-33597 describes a DoS in F-Secure Atlant where the SAVAPI component can crash while scanning fuzzed files. The issue can be triggered remotely and, if exploited, results in availability impact to the Anti-Virus engine. The provided documents confirm the vulnerability and impact but do no...

CVE-2021-40833

CVE-2021-40833 affects the F-Secure antivirus engine. The vulnerability arises in UPX unpacking, leading to denial-of-service. Exploitation is described as possible remotely in the CVE summary, but the connected documents do not provide explicit exploitation steps, affected versions, specific vul...