CVE-2020-9342
Medium
Description
The F-Secure AV parsing engine before 2020-02-05 allows virus-detection bypass via crafted Compression Method data in a GZIP archive. This affects versions before 17.0.605.474 (on Linux) of Cloud Protection For Salesforce, Email and Server Security, and Internet GateKeeper.
SeverityMedium
CVSS5.5
Exploit probability—
ProductF-secure Cloud Protection For Salesforce
PublishedFeb 22, 2020
First seenFeb 22, 2020
How to fix
Update
- f-secure cloud_protection_for_salesforce17.0.605.474 or later
- f-secure email_and_server_security17.0.605.474 or later
- f-secure internet_gatekeeper17.0.605.474 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| f-secure cloud_protection_for_salesforce | v < 17.0.605.474 | 17.0.605.474 |
| f-secure email_and_server_security | v < 17.0.605.474 | 17.0.605.474 |
| f-secure internet_gatekeeper | v < 17.0.605.474 | 17.0.605.474 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.