Multiple Denial-of-Service vulnerabilities was discovered in the F-Secure Atlant and in certain WithSecure products while scanning fuzzed PE32-bit files cause memory corruption and heap buffer overflow which eventually can crash the scanning engine. The exploit can be triggered remotely by an attacker.
Solution:
The product writes data past the end, or before the beginning, of the intended buffer.
| Link | Tags |
|---|---|
| https://www.f-secure.com/en/home/support/security-advisories | vendor advisory |
| https://www.withsecure.com/en/support/security-advisories | third party advisory |