Christian Jalio

توجد مشكلة double free تسمح لمهاجم غير مصرح له بتنفيذ رمز برمجي تعسفي عبر الشبكة، مما قد يؤثر على النظام. يحدث الـ double free عندما يحاول البرنامج تحرير نفس موقع الذاكرة مرتين، مما قد يؤدي إلى تلف الذاكرة.

Name of the Vulnerable Software and Affected Versions: WithSecure Atlant (formerly F-Secure Atlant) version 1.0.35-1 Description: The issue allows a remote Denial of Service because of memory corruption during scanning of a PE32 file. Recommendations: For version 1.0.35-1, consider disabling the scanning of PE32 files until a patch is available. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

The issue allows a Denial of Service (DoS) in the antivirus engine when scanning a fuzzed PE32 file.

A Denial-of-Service (DoS) issue was discovered in the fsicapd component used in certain F-Secure products. When scanning larger packages or fuzzed files, the component consumes too much memory, which can eventually crash the scanning engine. This issue can be triggered remotely by an attacker.

The issue is related to a heap buffer overflow in the PDFium PDF content handler. It can be exploited by a remote attacker using a specially crafted HTML page, potentially leading to heap corruption.