Medium WID-SEC-2023-2364 7 CVEs

WithSecure Endpoint Protection: Schwachstellen ermöglichen Denial of Service

Published Sep 14, 2023 · Updated Sep 14, 2023 · de-DE

Vendor: WithSecure Product: Endpoint Protection Platform: Windows

Summary

Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in WithSecure Endpoint Protection ausnutzen, um einen Denial of Service Angriff durchzuführen.

Product

WithSecure Endpoint Protection bezeichnet eine Produktfamilie von Sicherheitslösungen für Endpoints verschiedener Betriebssysteme.

Vulnerabilities 7

Unscored —

CVE-2023-42520

Certain WithSecure products allow a remote crash of a scanning engine via unpacking of crafted data files. This affects…

Sep 18, 2023
Unscored —

CVE-2023-42521

Certain WithSecure products allow a remote crash of a scanning engine via processing of a compressed file. This affects…

Sep 18, 2023
Unscored —

CVE-2023-42522

Certain WithSecure products allow a remote crash of a scanning engine via processing of an import struct in a PE file. …

Sep 18, 2023
Unscored —

CVE-2023-42523

Certain WithSecure products allow a remote crash of a scanning engine via unpacking of a PE file. This affects WithSecu…

Sep 18, 2023
Unscored —

CVE-2023-42524

Certain WithSecure products allow an infinite loop in a scanning engine via unspecified file types. This affects WithSe…

Sep 18, 2023
Unscored —

CVE-2023-42525

Certain WithSecure products allow an infinite loop in a scanning engine via unspecified file types. This affects WithSe…

Sep 18, 2023
Unscored —

CVE-2023-42526

Certain WithSecure products allow a remote crash of a scanning engine via decompression of crafted data files. This aff…

Sep 18, 2023

Revision history

2023-09-14 #1
Initiale Fassung

References

WithSecure Security Notification vom 2023-09-14
https://www.withsecure.com/en/support/security-advisories/cve-2023-42526
WithSecure Security Notification vom 2023-09-14
https://www.withsecure.com/en/support/security-advisories/cve-2023-42525
WithSecure Security Notification vom 2023-09-14
https://www.withsecure.com/en/support/security-advisories/cve-2023-42524
WithSecure Security Notification vom 2023-09-14
https://www.withsecure.com/en/support/security-advisories/cve-2023-42523
WithSecure Security Notification vom 2023-09-14
https://www.withsecure.com/en/support/security-advisories/cve-2023-42522
WithSecure Security Notification vom 2023-09-14
https://www.withsecure.com/en/support/security-advisories/cve-2023-42521
WithSecure Security Notification vom 2023-09-14
https://www.withsecure.com/en/support/security-advisories/cve-2023-42520