CVE-2020-9342 - CVE House
Back to Database
Status published Medium CVE-2020-9342

The F-Secure AV parsing engine before 2020-02-05 allows virus-detection bypass...

Vulnerability Description

The F-Secure AV parsing engine before 2020-02-05 allows virus-detection bypass via crafted Compression Method data in a GZIP archive. This affects versions before 17.0.605.474 (on Linux) of Cloud Protection For Salesforce, Email and Server Security, and Internet GateKeeper.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2020-9342

Credits & Attribution

No credits recorded in the NVD database.

References

More from f-secure

View All →
CVE-2022-47524
F-Secure SAFE Browser 19.1 before 19.2 for Android allows an...
Unknown 0
CVE-2022-45871
Denial-of-Service (DoS) Vulnerability
Medium 4.3
CVE-2022-38166
In F-Secure Endpoint Protection for Windows and macOS before channel...
Unknown 0
CVE-2022-38164
A vulnerability affecting F-Secure SAFE browser for Android and iOS...
Unknown 0
CVE-2022-38163
A Drag and Drop spoof vulnerability was discovered in F-Secure...
Unknown 0

Affected Vendor

Affected Software

cloud protection for salesforce, email and server security, internet gatekeeper
Vulnerable Versions:
0

Timeline

Official Publish: February 22nd, 2020
Last Modified: August 4th, 2024
Added to House: July 21st, 2026

CVSS Vectors

V3: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N

Weaknesses (CWE)

No CWE data available

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.