Vulnerability Intelligence Report

CVE-2010-1425

F-Secure Internet Security 2010 and earlier; Anti-Virus for Microsoft Exchange 9 and earlier, and for MIMEsweeper 5.61 and earlier; Internet Gatekeeper for Windows 6.61 and earlier, and for Linux 4.02 and earlier; Anti-Virus 2010 and earlier; Home Server Security 2009; Protection Service for Consumers 9 and earlier, for Business - Workstation security 9 and earlier, for Business - Server Security 8 and earlier, and for E-mail and Server security 9 and earlier; Mac Protection build 8060 and earlier; Client Security 9 and earlier; and various Anti-Virus products for Windows, Linux, and Citrix; does not properly detect malware in crafted (1) 7Z, (2) GZIP, (3) CAB, or (4) RAR archives, which makes it easier for remote attackers to avoid detection.

No Active Exploit Signals

CVSS Base Score

5.0

MEDIUM

EPSS Probability:2.15%

Executive Threat Verdict

Evaluating...

Evaluating Threat Landscape...

Assessing known weaponization, exploitation telemetry, and federal advisories.

Attack Surface

—

Authentication

—

Weaponization

—

SSVC Action

—

Weaknesses (CWE)

Affected Products & Versions

Vendor	Product	Affected Versions
f-secure	anti-virus	6.62, 7.0, 7.10
f-secure	f-secure_anti-virus	2.16, 4.50, 4.50_hotfix_1, 4.50_hotfix_2, 4.51, 4.51_hotfix_2, 4.52, 4.60, 4.61, 4.62, 4.64, 4.65, 5.0, 5.0.2, 5.01, 5.2.1, 5.3.0, 5.5, 5.11, 5.40, 5.41, 5.42, 5.43, 5.44, 5.51, 5.52, 5.54, 5.55, 5.56, 5.61, 6.01, 6.02, 6.2, 6.03, 6.21, 6.30, 6.30_sr1, 6.31, 6.40, 6.60, 6.61, 7.00, 7.02, 2003, 2004, 2005, 2006, 2007, 2008, 2009
f-secure	f-secure_anti-virus_client_security	6.03, 6.04, 7.01, 7.10
f-secure	f-secure_anti-virus_for_citrix_servers	7.00
f-secure	f-secure_anti-virus_for_linux	4.65
f-secure	f-secure_anti-virus_for_microsoft_exchange	6.62, 7.00, 7.10
f-secure	f-secure_anti-virus_for_mimesweeper	5.61
f-secure	f-secure_anti-virus_for_windows_servers	8.00
f-secure	f-secure_anti-virus_for_workstations	5.44, 7.00, 7.10, 7.11
f-secure	f-secure_anti-virus_linux_client_security	5.30, 5.52, 5.53, 5.54
f-secure	f-secure_anti-virus_linux_server_security	5.30, 5.52, 5.54
f-secure	f-secure_internet_security	7.02, 2003, 2004, 2005, 2006, 2007, 2008, 2009
f-secure	home_server_security	2009
f-secure	internet_gatekeeper	all

Exploitation & Remediation

References & Technical Advisories

NVD Listing ↗ MITRE Listing ↗ GitHub Advisory ↗

No reference links found.

Threat Intelligence Signals

EPSS Score

2.151%

GitHub Advisory

GHSA-hc3f-7h3x-c3v8 ↗

CVSS Vector Breakdown

Attack Vector

Attack Complexity

Privileges Required

User Interaction

Confidentiality

Integrity

Availability

Identity & Timeline

Status	PUBLISHED
Assigning Authority	MITRE Corporation · N/A · USA
Reserved	2010-04-15T00:00:00
Published	2010-04-15T21:12:00
Last Updated	2024-09-17T02:41:53

MITRE ATT&CK Mapping

Tactics

Techniques

CVE-2010-1425

—

Public Weaponization & Exploit Code Exploit-DB Catalog

Weaknesses (CWE)

Affected Products & Versions

Exploitation & Remediation

References & Technical Advisories

Threat Intelligence Signals

CVSS Vector Breakdown

Identity & Timeline

SSVC Prioritization

MITRE ATT&CK Mapping

CVE-2010-1425

—

Public Weaponization & Exploit Code Exploit-DB Catalog

Weaknesses (CWE)

Affected Products & Versions

Exploitation & Remediation

References & Technical Advisories

Threat Intelligence Signals

CVSS Vector Breakdown

Identity & Timeline

SSVC Prioritization

MITRE ATT&CK Mapping

Community Chatter & Buzz

Related Intelligence

SHARE INTELLIGENCE WIRE