Multiple F-Secure Windows Endpoint Protection Products Local Code Execution Vulnerability

Bugtraq ID:	108443
Class:	Design Error
CVE:	CVE-2019-5519
Remote:	No
Local:	Yes
Published:	May 02 2019 12:00AM
Updated:	May 02 2019 12:00AM
Credit:	Pierre-Alexandre Braeken
Vulnerable:	F-Secure Server Security 12.12 F-Secure Psb Workstation Security 12.01 F-Secure PSB Email and Server Security 12.10 F-Secure Email and Server Security 12.12
Not Vulnerable:	F-Secure Server Security 14.00

Multiple F-Secure Windows Endpoint Protection Products Local Code Execution Vulnerability

Multiple VMware products are prone to a local code-execution vulnerability.

Successfully exploiting this issue allows attackers to execute arbitrary code in the context of the affected application. Failed exploits will result in denial-of-service conditions.

Multiple F-Secure Windows Endpoint Protection Products Local Code Execution Vulnerability

Currently, we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

Multiple F-Secure Windows Endpoint Protection Products Local Code Execution Vulnerability

Solution:
Updates are available. Please see the references or vendor advisory for more information.

Multiple F-Secure Windows Endpoint Protection Products Local Code Execution Vulnerability

References:

• F-Secure Homepage (F-Secure)
  
• FSC-2019-1: Local Code Execution Vulnerability in F-Secure Windows Endpoint (F-secure)