CVE-2009-2543: IBM Proventia Desktop Endpoint Security

High severity, CVSS 10.0. EPSS: 2.3% chance of exploitation in the next 30 days.

Multiple unspecified vulnerabilities in the IBM Proventia engine 4.9.0.0.44 20081231, as used in IBM Proventia Network Mail Security System, Network Mail Security System Virtual Appliance, Desktop Endpoint Security, Network Multi-Function Security (MFS), and possibly other products, allow remote attackers to bypass detection of malware via a modified (1) ZIP or (2) CAB archive, a related issue to CVE-2009-1240.

Affected products

• IBM Proventia Desktop Endpoint Security: any version
• IBM Proventia Network Mail Security System: any version
• IBM Proventia Network Mail Security System Vitual Appliance: any version
• IBM Proventia Network Multi-Function Security: any version

Published 2009-07-20. Last modified 2026-06-16.