F-secure Internet Gatekeeper — known CVE vulnerabilities

Every CVE whose affected-product data names F-secure Internet Gatekeeper, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (46)

• CVE-2004-0234 — CVSS 10.0 (critical): Multiple stack-based buffer overflows in the get_header function in header.c for LHA 1.14, as used in products such as Barracuda Spam…
• CVE-2007-2967 — CVSS 10.0 (critical): Multiple F-Secure anti-virus products for Microsoft Windows and Linux before 20070522 allow remote attackers to cause a denial of service…
• CVE-2007-3300 — CVSS 9.3 (critical): Multiple F-Secure anti-virus products for Microsoft Windows and Linux before 20070619 allow remote attackers to bypass scanning via a…
• CVE-2006-2838 — CVSS 7.6 (high): Buffer overflow in the web console in F-Secure Anti-Virus for Microsoft Exchange 6.40, and Internet Gatekeeper 6.40 through 6.42 and 6.50…
• CVE-2021-33601 — CVSS 7.6 (high): A vulnerability was discovered in the web user interface of F-Secure Internet Gatekeeper. An authenticated user can modify settings through…
• CVE-2004-0161 — CVSS 7.5 (high): Multiple content security gateway and antivirus products allow remote attackers to bypass content restrictions via MIME messages that use…
• CVE-2004-0162 — CVSS 7.5 (high): Multiple content security gateway and antivirus products allow remote attackers to bypass content restrictions via MIME encapsulation that…
• CVE-2003-1015 — CVSS 7.5 (high): Multiple content security gateway and antivirus products allow remote attackers to bypass content restrictions via MIME messages that use…
• CVE-2005-0350 — CVSS 7.5 (high): Heap-based buffer overflow in multiple F-Secure Anti-Virus and Internet Security products allows remote attackers to execute arbitrary code…
• CVE-2007-2966 — CVSS 7.5 (high): Buffer overflow in the LHA decompression component in F-Secure anti-virus products for Microsoft Windows and Linux before 20070529 allows…
• CVE-2003-1016 — CVSS 7.5 (high): Multiple content security gateway and antivirus products allow remote attackers to bypass content restrictions via MIME messages that use…
• CVE-2004-0051 — CVSS 7.5 (high): Multiple content security gateway and antivirus products allow remote attackers to bypass content restrictions via MIME messages that use…
• CVE-2004-0052 — CVSS 7.5 (high): Multiple content security gateway and antivirus products allow remote attackers to bypass content restrictions via MIME messages that use…
• CVE-2004-0053 — CVSS 7.5 (high): Multiple content security gateway and antivirus products allow remote attackers to bypass content restrictions via MIME messages that use…
• CVE-2006-0337 — CVSS 7.5 (high): Buffer overflow in multiple F-Secure Anti-Virus products and versions for Windows and Linux, including Anti-Virus for Windows Servers 5.52…
• CVE-2007-2965 — CVSS 7.2 (high): Unspecified vulnerability in the Real-time Scanning component in multiple F-Secure products, including Internet Security 2005, 2006 and…
• CVE-2005-3546 — CVSS 7.2 (high): suid.cgi scripts in F-Secure (1) Internet Gatekeeper for Linux before 2.15.484 and (2) Anti-Virus Linux Gateway before 2.16 are installed…
• CVE-2009-1782 — CVSS 6.8 (medium): Multiple F-Secure anti-virus products, including Anti-Virus for Microsoft Exchange 7.10 and earlier; Internet Gatekeeper for Windows 6.61…
• CVE-2004-0235 — CVSS 6.4 (medium): Multiple directory traversal vulnerabilities in LHA 1.14 allow remote attackers or local users to create arbitrary files via an LHA archive…
• CVE-2004-2405 — CVSS 6.4 (medium): Buffer overflow in multiple F-Secure Anti-Virus products, including F-Secure Anti-Virus 5.42 and earlier, allows remote attackers to bypass…
• CVE-2021-33602 — CVSS 5.5 (medium): A vulnerability affecting the F-Secure Antivirus engine was discovered when the engine tries to unpack a zip archive (LZW decompression…
• CVE-2020-9342 — CVSS 5.5 (medium): The F-Secure AV parsing engine before 2020-02-05 allows virus-detection bypass via crafted Compression Method data in a GZIP archive. This…
• CVE-2021-33603 — CVSS 5.5 (medium): A Denial-of-Service (DoS) vulnerability was discovered in F-Secure Atlant whereby the AVPACK module component used in certain F-Secure…
• CVE-2021-40832 — CVSS 5.5 (medium): A Denial-of-Service (DoS) vulnerability was discovered in F-Secure Atlant whereby the AVRDL unpacking module component used in certain…
• CVE-2021-40833 — CVSS 5.5 (medium): A vulnerability affecting F-Secure antivirus engine was discovered whereby unpacking UPX file can lead to denial-of-service. The…
• CVE-2021-33600 — CVSS 5.4 (medium): A denial-of-service (DoS) vulnerability was discovered in the web user interface of F-Secure Internet Gatekeeper. The vulnerability occurs…
• CVE-2004-2442 — CVSS 5.0 (medium): Multiple interpretation error in various F-Secure Anti-Virus products, including Workstation 5.43 and earlier, Windows Servers 5.50 and…
• CVE-2004-0830 — CVSS 5.0 (medium): The Content Scanner Server in F-Secure Anti-Virus for Microsoft Exchange 6.21 and earlier, F-Secure Anti-Virus for Microsoft Exchange 6.01…
• CVE-2011-0453 — CVSS 5.0 (medium): F-Secure Internet Gatekeeper for Linux 3.x before 3.03 does not require authentication for reading access logs, which allows remote…
• CVE-2006-0338 — CVSS 5.0 (medium): Multiple F-Secure Anti-Virus products and versions for Windows and Linux, including Anti-Virus for Windows Servers 5.52 and earlier…
• CVE-2005-3468 — CVSS 5.0 (medium): Directory traversal vulnerability in F-Secure Anti-Virus for Microsoft Exchange 6.40 and Internet Gatekeeper 6.40 to 6.42 allows limited…
• CVE-2010-1425 — CVSS 5.0 (medium): F-Secure Internet Security 2010 and earlier; Anti-Virus for Microsoft Exchange 9 and earlier, and for MIMEsweeper 5.61 and earlier…
• CVE-2021-40836 — CVSS 4.6 (medium): A vulnerability affecting F-Secure antivirus engine was discovered whereby scanning MS outlook .pst files can lead to denial-of-service…
• CVE-2021-40837 — CVSS 4.6 (medium): A vulnerability affecting F-Secure antivirus engine before Capricorn update 2022-02-01_01 was discovered whereby decompression of ACE file…
• CVE-2021-44747 — CVSS 4.6 (medium): A Denial-of-Service (DoS) vulnerability was discovered in F-Secure Linux Security whereby the Fmlib component used in certain F-Secure…
• CVE-2022-28875 — CVSS 4.3 (medium): A Denial-of-Service (DoS) vulnerability was discovered in F-Secure Atlant and in certain WithSecure products whereby the scanning the…
• CVE-2022-28884 — CVSS 4.3 (medium): A Denial-of-Service vulnerability was discovered in the F-Secure and WithSecure products where aerdl.dll may go into an infinite loop when…
• CVE-2022-28886 — CVSS 4.3 (medium): A Denial-of-Service vulnerability was discovered in the F-Secure and WithSecure products where aerdl.so/aerdl.dll may go into an infinite…
• CVE-2022-28887 — CVSS 4.3 (medium): Multiple Denial-of-Service (DoS) vulnerability was discovered in F-Secure & WithSecure products whereby the aerdl.dll unpacker handler…
• CVE-2022-28876 — CVSS 4.3 (medium): A Denial-of-Service (DoS) vulnerability was discovered in F-Secure Atlant and in certain WithSecure products whereby the scanning the…
• CVE-2022-28878 — CVSS 4.3 (medium): A Denial-of-Service vulnerability was discovered in the F-Secure Atlant and in certain WithSecure products while scanning fuzzed APK file…
• CVE-2022-28879 — CVSS 4.3 (medium): A Denial-of-Service (DoS) vulnerability was discovered in F-Secure Atlant and in certain WithSecure products whereby the scanning the…
• CVE-2022-28880 — CVSS 4.3 (medium): A Denial-of-Service vulnerability was discovered in the F-Secure Atlant and in certain WithSecure products while scanning fuzzed PE32-bit…
• CVE-2022-28881 — CVSS 4.3 (medium): A Denial-of-Service (DoS) vulnerability was discovered in F-Secure Atlant whereby the aerdl.dll component used in certain WithSecure…
• CVE-2022-28882 — CVSS 4.3 (medium): A Denial-of-Service (DoS) vulnerability was discovered in F-Secure & WithSecure products whereby the aegen.dll will go into an infinite…
• CVE-2022-28883 — CVSS 3.5 (low): A Denial-of-Service (DoS) vulnerability was discovered in F-Secure & WithSecure products whereby the aerdl unpack function crashes. This…