CVE-2020-9342

MEDIO 5.5CVE-2020-9342 · Published 22/02/2020 · updated 17/06/2026

En resumen

CVE-2020-9342 es una vulnerabilidad MEDIO (CVSS 5.5) que afecta a cloud protection for salesforce (f-secure), email and server security (f-secure), internet gatekeeper (f-secure).
Probabilidad de explotación en los próximos 30 días (EPSS): 1.6%, mayor que el 76.4% de las vulnerabilidades.
Solución: actualizar a 17.0.605.474 o posterior.

Package	Affected versions	Patched versions
cloud protection for salesforce f-secure	`< 17.0.605.474`	`17.0.605.474`
email and server security f-secure	`< 17.0.605.474`	`17.0.605.474`
internet gatekeeper f-secure	`< 17.0.605.474`	`17.0.605.474`

Description

The F-Secure AV parsing engine before 2020-02-05 allows virus-detection bypass via crafted Compression Method data in a GZIP archive. This affects versions before 17.0.605.474 (on Linux) of Cloud Protection For Salesforce, Email and Server Security, and Internet GateKeeper.

References

packetstormsecurity.com/files/156506/F-SECURE-Generic-Malformed-Container-Bypass.html · Third Party Advisory
seclists.org/fulldisclosure/2020/Feb/33 · Mailing List
blog.zoller.lu/p/tzo-16-2020-f-secure-generic-malformed.html · Third Party Advisory
seclists.org/bugtraq/2020/Feb/33 · Mailing List

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free