CVE-2022-38166

Name of the Vulnerable Software and Affected Versions F-Secure Endpoint Protection for Windows and macOS versions before channel with Capricorn database 2022-11-22 07

Description The issue is related to the incorrect handling of the path to the aerdl.dll library, which can cause the unpacker handler to crash. This crash can lead to a scanning engine crash. The issue can be triggered remotely by an attacker, resulting in a denial of service.

Recommendations For F-Secure Endpoint Protection for Windows and macOS versions before channel with Capricorn database 2022-11-22 07, update to a version with a Capricorn database of 2022-11-22 07 or later to resolve the issue. As a temporary workaround, consider restricting access to the aerdl.dll library to minimize the risk of exploitation.