CVE-2009-1782 Security feature bypass in n/a
Remote attackers can bypass malware detection in F-Secure products by sending crafted ZIP or RAR archives, requiring user interaction to open the files.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- A user has to click or open something
- Fix
- None listed
What is CVE-2009-1782?
CVE-2009-1782 is a medium-severity vulnerability in n/a, published on 22 May 2009. An attacker can exploit it over the internet without logging in, and only if a user opens a file or follows a link.
Official description
Multiple F-Secure anti-virus products, including Anti-Virus for Microsoft Exchange 7.10 and earlier; Internet Gatekeeper for Windows 6.61 and earlier, Windows 6.61 and earlier, and Linux 2.16 and earlier; Internet Security 2009 and earlier, Anti-Virus 2009 and earlier, Client Security 8.0 and earlier, and others; allow remote attackers to bypass malware detection via a crafted (1) ZIP and (2) RAR archive.
Which versions are affected by CVE-2009-1782?
It affects 6 products.
Products include F-Secure Anti-Virus, F-Secure Client Security, F-Secure Home Server Security, F-Secure Internet Gatekeeper, F-Secure Internet Security, F-Secure Linux Security.
How do I fix CVE-2009-1782?
No fix has been published for CVE-2009-1782 yet. Limit exposure of the affected software until one is available.
Is CVE-2009-1782 being exploited?
There is no known exploitation of CVE-2009-1782 in the wild and no public exploit code.
Other vulnerabilities in n/a
Sources
Also known as GHSA-rh92-qx5f-h8p2.