Sploit.io - Search

CVE-2022-28874

Severity: MEDIUM

Description: Multiple Denial-of-Service vulnerabilities was discovered in the F-Secure Atlant and in certain WithSecure products while scanning fuzzed PE32-bit files cause memory corruption and heap buffer overflow which eventually can crash the scanning engine. The exploit can be triggered remotely by an attacker.

Affected Products:

• F-Secure F-Secure endpoint protection products for Windows and Mac. F-Secure Linux Security (32-bit). F-Secure Linux Security 64. F-Secure Atlant. WithSecure Cloud Protection for Salesforce & WithSecure Collaboration Protection - Versions: All Version

References:

• https://www.f-secure.com/en/home/support/security-advisories
• https://www.withsecure.com/en/support/security-advisories