CVE-2021-40837

Common vulnerabilities & exposures (CVE)

CVE database CVE database blogpost Release & EoL database

Published at: - 09-02-2022 02:15

Last modified: - 11-02-2022 09:54

Total changes: - 2

Description

A vulnerability affecting F-Secure antivirus engine before Capricorn update 2022-02-01_01 was discovered whereby decompression of ACE file causes the scanner service to stop. The vulnerability can be exploited remotely by an attacker. A successful attack will result in denial-of-service of the antivirus engine.

Common Vulnerability Scoring System (CVSS)

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L

Low

Attack complexity

Network

Attack vector

Low

Availability

None

Confidentiality

None

Integrity

None

Privileges required

Unchanged

Scope

None

User interaction

5.3

Base score

3.9

1.4

Exploitability score

Impact score

Verification logic

vendor=f-secure AND product=atlant AND versionEndExcluding=2022-02-01_01

vendor=f-secure AND product=internet_gatekeeper AND versionEndExcluding=2022-02-01_01

vendor=f-secure AND product=linux_security AND versionEndExcluding=2022-02-01_01

vendor=f-secure AND product=security_cloud AND versionEndExcluding=2022-02-01_01

AND

vendor=f-secure AND product=elements_endpoint_detection_and_response AND versionEndExcluding=2022-02-01_01

vendor=f-secure AND product=elements_endpoint_protection AND versionEndExcluding=2022-02-01_01

vendor=apple AND product=macos AND version=-

vendor=microsoft AND product=windows AND version=-

Reference

Keywords

CVE-2021-40837

Common vulnerabilities & exposures (CVE)

Description

Common Vulnerability Scoring System (CVSS)

Verification logic

Reference

NVD

CVE-2021-40837

CVE

Common vulnerabilities & exposures

CVSS

Common vulnerability scoring system

Security

Vulnerabilities

Exposures