CVE-2022-28874

MEDIUM

F-Secure Atlant and WithSecure Elements - Denial of Service via Fuzzed PE32-bit File Scanning

Title source: llm
STIX 2.1

Description

Multiple Denial-of-Service vulnerabilities was discovered in the F-Secure Atlant and in certain WithSecure products while scanning fuzzed PE32-bit files cause memory corruption and heap buffer overflow which eventually can crash the scanning engine. The exploit can be triggered remotely by an attacker.

References (2)

Core 2
Core References
Third Party Advisory x_refsource_misc
https://www.withsecure.com/en/support/security-advisories

Scores

CVSS v3 4.3
EPSS 0.0057
EPSS Percentile 42.9%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:L/I:L/A:L

Details

CWE
CWE-787
Status published
Products (5)
f-secure/atlant
f-secure/elements_endpoint_protection
f-secure/linux_security
withsecure/cloud_protection_for_salesforce
withsecure/elements_collaboration_protection
Published May 23, 2022
Tracked Since Feb 18, 2026