BID:11732

F-Secure Anti-Virus ZIP Archive Scanner Bypass Vulnerability

Info

F-Secure Anti-Virus ZIP Archive Scanner Bypass Vulnerability

Bugtraq ID:	11732
Class:	Failure to Handle Exceptional Conditions
CVE:
Remote:	Yes
Local:	No
Published:	Nov 23 2004 12:00AM
Updated:	Nov 23 2004 12:00AM
Credit:	This vulnerability was announced by the vendor.
Vulnerable:	F-Secure Personal Express 5.0 F-Secure Personal Express 4.7 F-Secure Personal Express 4.6 F-Secure Personal Express 4.5 F-Secure Internet Security 2005 F-Secure Internet Security 2004 F-Secure Internet Gatekeeper for Linux 2.6 F-Secure Internet Gatekeeper 6.41 F-Secure Internet Gatekeeper 6.40 0 F-Secure Internet Gatekeeper 6.32 F-Secure Internet Gatekeeper 6.31 F-Secure Internet Gatekeeper 6.3 F-Secure F-Secure for Firewalls 6.20 F-Secure Anti-Virus Linux Server Security 5.0 F-secure Anti-Virus Linux Client Security 5.0 F-Secure Anti-Virus for Workstations 5.43 F-Secure Anti-Virus for Workstations 5.42 F-Secure Anti-Virus for Workstations 5.41 F-Secure Anti-Virus for Windows Servers 5.50 F-Secure Anti-Virus for Windows Servers 5.42 F-Secure Anti-Virus for Windows Servers 5.41 F-Secure Anti-Virus for Samba Servers 4.60 F-Secure Anti-Virus for MS Exchange 6.31 F-Secure Anti-Virus for MS Exchange 6.31 F-Secure Anti-Virus for MS Exchange 6.30 Service Release 1 F-Secure Anti-Virus for MS Exchange 6.21 F-Secure Anti-Virus for MS Exchange 6.3 0 F-Secure Anti-Virus for MS Exchange 6.2 F-Secure Anti-Virus for MS Exchange 6.0 1 F-Secure Anti-Virus for MIMEsweeper 5.50 F-Secure Anti-Virus for MIMEsweeper 5.42 F-Secure Anti-Virus for MIMEsweeper 5.41 F-Secure Anti-Virus for Linux Workstations 4.52 F-Secure Anti-Virus for Linux Workstations 4.51 F-Secure Anti-Virus for Linux Servers 4.61 F-Secure Anti-Virus for Linux Servers 4.52 F-Secure Anti-Virus for Linux Servers 4.51 F-Secure Anti-Virus for Linux Gateways 4.61 F-Secure Anti-Virus for Linux Gateways 4.52 F-Secure Anti-Virus for Linux Gateways 4.51 F-Secure Anti-Virus Client Security 5.55 F-Secure Anti-Virus Client Security 5.52 F-Secure Anti-Virus Client Security 5.50 F-secure Anti-Virus 2005 F-Secure Anti-Virus 2004

Not Vulnerable:

Discussion

F-Secure Anti-Virus ZIP Archive Scanner Bypass Vulnerability

A vulnerability is reported to be present in the F-secure Anti-Virus software that may cause the software to fail in detecting malicious ZIP archives. It is reported that the software does not filter certain ZIP archives.

Exploitation of this vulnerability may result in a false sense of security and in the execution of malicious applications.

Exploit / POC

F-Secure Anti-Virus ZIP Archive Scanner Bypass Vulnerability

Currently we are not aware of any exploits for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.

Solution / Fix

F-Secure Anti-Virus ZIP Archive Scanner Bypass Vulnerability

Solution:
The vendor has released updates to address this vulnerability. A hotfix for F-Secure Internet Security 2004 and 2005, Anti-Virus 2004 and 2005, and Personal Express 5.00 and earlier is downloaded by these products automatically. Other fixes are available; please see the referenced advisory for further information in regard to obtaining and applying appropriate fixes.

F-Secure Internet Gatekeeper for Linux 2.6