CVE-2010-1425

MediumCVSS 5.0/10Last modified Jun 16, 2026

Description

F-Secure Internet Security 2010 and earlier; Anti-Virus for Microsoft Exchange 9 and earlier, and for MIMEsweeper 5.61 and earlier; Internet Gatekeeper for Windows 6.61 and earlier, and for Linux 4.02 and earlier; Anti-Virus 2010 and earlier; Home Server Security 2009; Protection Service for Consumers 9 and earlier, for Business - Workstation security 9 and earlier, for Business - Server Security 8 and earlier, and for E-mail and Server security 9 and earlier; Mac Protection build 8060 and earlier; Client Security 9 and earlier; and various Anti-Virus products for Windows, Linux, and Citrix; does not properly detect malware in crafted (1) 7Z, (2) GZIP, (3) CAB, or (4) RAR archives, which makes it easier for remote attackers to avoid detection.

Metrics

CVSS 2.0 5.0/10AV:N/AC:L/Au:N/C:N/I:P/A:N

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

http://secunia.com/advisories/39396Vendor Advisory
http://www.f-secure.com/en_EMEA/support/security-advisory/fsc-2010-1.htmlPatch, Vendor Advisory
http://www.securitytracker.com/id?1023841
http://www.securitytracker.com/id?1023842
http://www.securitytracker.com/id?1023843
http://www.vupen.com/english/advisories/2010/0855Patch, Vendor Advisory
http://secunia.com/advisories/39396Vendor Advisory
http://www.f-secure.com/en_EMEA/support/security-advisory/fsc-2010-1.htmlPatch, Vendor Advisory
http://www.securitytracker.com/id?1023841
http://www.securitytracker.com/id?1023842
http://www.securitytracker.com/id?1023843
http://www.vupen.com/english/advisories/2010/0855Patch, Vendor Advisory

Timeline

Published: Apr 15, 2010
Last modified: Jun 16, 2026
NVD status: Modified

Related CVEs from 2010

CVE-2010-14267.5SQL injection vulnerability in MODx Evolution before 1.0.3 allows remote attackers to execute arbitrary SQL commands via unknown vectors rel CVE-2010-14274.3Cross-site scripting (XSS) vulnerability in the SearchHighlight plugin in MODx Evolution before 1.0.3 allows remote attackers to inject arbi CVE-2010-14287.5The Web Console (aka web-console) in JBossAs in Red Hat JBoss Enterprise Application Platform (aka JBoss EAP or JBEAP) 4.2 before 4.2.0.CP09 CVE-2010-14295.0Red Hat JBoss Enterprise Application Platform (aka JBoss EAP or JBEAP) 4.2 before 4.2.0.CP09 and 4.3 before 4.3.0.CP08 allows remote attacke CVE-2010-14317.5SQL injection vulnerability in templates_export.php in Cacti 0.8.7e and earlier allows remote attackers to execute arbitrary SQL commands vi CVE-2010-14327.5Joomla! Core is prone to an information disclosure vulnerability. Attackers can exploit this issue to obtain sensitive information that may CVE-2010-14339.8Joomla! Core is prone to a vulnerability that lets attackers upload arbitrary files because the application fails to properly verify user-su CVE-2010-14347.5Joomla! Core is prone to a session fixation vulnerability. An attacker may leverage this issue to hijack an arbitrary session and gain acces CVE-2010-14359.8Joomla! Core is prone to a security bypass vulnerability. Exploiting this issue may allow attackers to perform otherwise restricted actions CVE-2010-14364.9gfs2 in the Linux kernel 2.6.18, and possibly other versions, does not properly handle when the gfs2_quota struct occupies two separate page CVE-2010-14377.0Race condition in the find_keyring_by_name function in security/keys/keyring.c in the Linux kernel 2.6.34-rc5 and earlier allows local users CVE-2010-14384.4Web Application Finger Printer (WAFP) 0.01-26c3 uses fixed pathnames under /tmp for temporary files and directories, which (1) allows local