10

CVE-2009-1783

Multiple FRISK Software F-Prot anti-virus products, including Antivirus for Exchange, Linux on IBM zSeries, Linux x86 File Servers, Linux x86 Mail Servers, Linux x86 Workstations, Solaris Mail Servers, Antivirus for Windows, and others, allow remote attackers to bypass malware detection via a crafted CAB archive.

Data is provided by the National Vulnerability Database (NVD)
F-prot ≫ F-prot Antivirus Updateexchange
F-prot ≫ F-prot Antivirus Updatelinux_on_ibm_zseries
F-prot ≫ F-prot Antivirus Updatelinux_x86_file_servers
F-prot ≫ F-prot Antivirus Updatelinux_x86_mail_servers
F-prot ≫ F-prot Antivirus Updatelinux_x86_workstations
F-prot ≫ F-prot Antivirus Updatesolaris_mail_servers
F-prot ≫ F-prot Antivirus Updatewindows
F-prot ≫ F-prot Antivirus Updatewindows_mail_servers
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
EPSS Metriken
Type Source Score Percentile
EPSS FIRST.org 0.41% 0.582
CVSS Metriken
Source Base Score Exploit Score Impact Score Vector string
nvd@nist.gov 10 10 10
AV:N/AC:L/Au:N/C:C/I:C/A:C
CWE-20 Improper Input Validation

The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.