10

CVE-2009-1783

Multiple FRISK Software F-Prot anti-virus products, including Antivirus for Exchange, Linux on IBM zSeries, Linux x86 File Servers, Linux x86 Mail Servers, Linux x86 Workstations, Solaris Mail Servers, Antivirus for Windows, and others, allow remote attackers to bypass malware detection via a crafted CAB archive.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
F-prot ≫ F-prot Antivirus Update exchange
F-prot ≫ F-prot Antivirus Update linux_on_ibm_zseries
F-prot ≫ F-prot Antivirus Update linux_x86_file_servers
F-prot ≫ F-prot Antivirus Update linux_x86_mail_servers
F-prot ≫ F-prot Antivirus Update linux_x86_workstations
F-prot ≫ F-prot Antivirus Update solaris_mail_servers
F-prot ≫ F-prot Antivirus Update windows
F-prot ≫ F-prot Antivirus Update windows_mail_servers
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 3.44% 0.874
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 10 10 10
AV:N/AC:L/Au:N/C:C/I:C/A:C
CWE-20 Improper Input Validation

The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

http://blog.zoller.lu/2009/04/advisory-f-prot-frisk-cab-bypass.html
http://www.securityfocus.com/archive/1/503393/100/0/threaded
http://www.securityfocus.com/bid/34896
https://exchange.xforce.ibmcloud.com/vulnerabilities/50427