CVE-2020-9342

MOYENNE 5.5CVE-2020-9342 · Published 22/02/2020 · updated 17/06/2026

En bref

CVE-2020-9342 est une vulnérabilité MOYENNE (CVSS 5.5) touchant cloud protection for salesforce (f-secure), email and server security (f-secure), internet gatekeeper (f-secure).
Probabilité d'exploitation dans les 30 prochains jours (EPSS) : 1.6%, plus élevée que 76.4% des vulnérabilités.
Correctif : mettre à jour vers 17.0.605.474 ou plus récent.

Package	Affected versions	Patched versions
cloud protection for salesforce f-secure	`< 17.0.605.474`	`17.0.605.474`
email and server security f-secure	`< 17.0.605.474`	`17.0.605.474`
internet gatekeeper f-secure	`< 17.0.605.474`	`17.0.605.474`

Description

The F-Secure AV parsing engine before 2020-02-05 allows virus-detection bypass via crafted Compression Method data in a GZIP archive. This affects versions before 17.0.605.474 (on Linux) of Cloud Protection For Salesforce, Email and Server Security, and Internet GateKeeper.

References

packetstormsecurity.com/files/156506/F-SECURE-Generic-Malformed-Container-Bypass.html · Third Party Advisory
seclists.org/fulldisclosure/2020/Feb/33 · Mailing List
blog.zoller.lu/p/tzo-16-2020-f-secure-generic-malformed.html · Third Party Advisory
seclists.org/bugtraq/2020/Feb/33 · Mailing List

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free