CVE-2010-1425: F-Secure Anti-Virus

Medium severity, CVSS 5.0. EPSS: 2.2% chance of exploitation in the next 30 days.

F-Secure Internet Security 2010 and earlier; Anti-Virus for Microsoft Exchange 9 and earlier, and for MIMEsweeper 5.61 and earlier; Internet Gatekeeper for Windows 6.61 and earlier, and for Linux 4.02 and earlier; Anti-Virus 2010 and earlier; Home Server Security 2009; Protection Service for Consumers 9 and earlier, for Business - Workstation security 9 and earlier, for Business - Server Security 8 and earlier, and for E-mail and Server security 9 and earlier; Mac Protection build 8060 and earlier; Client Security 9 and earlier; and various Anti-Virus products for Windows, Linux, and Citrix; does not properly detect malware in crafted (1) 7Z, (2) GZIP, (3) CAB, or (4) RAR archives, which makes it easier for remote attackers to avoid detection.

Affected products

  • F-Secure Anti-Virus: up to and including 9.00; version 6.62 only; version 7.0 only; version 7.10 only
  • F-Secure F-Secure Anti-Virus: any version; up to and including 2010; version 2.16 only; version 4.50 only; version 4.50_hotfix_1 only; version 4.50_hotfix_2 only; …
  • F-Secure F-Secure Anti-Virus Client Security: any version; version 6.03 only; version 6.04 only; version 7.01 only; version 7.10 only
  • F-Secure F-Secure Anti-Virus For Citrix Servers: version 7.00 only
  • F-Secure F-Secure Anti-Virus For Linux: any version; version 4.65 only
  • F-Secure F-Secure Anti-Virus For Microsoft Exchange: version 6.62 only; version 7.00 only; version 7.10 only
  • F-Secure F-Secure Anti-Virus For Mimesweeper: version 5.61 only
  • F-Secure F-Secure Anti-Virus For Windows Servers: version 8.00 only
  • F-Secure F-Secure Anti-Virus For Workstations: any version; version 5.44 only; version 7.00 only; version 7.10 only; version 7.11 only
  • F-Secure F-Secure Anti-Virus Linux Client Security: any version; version 5.30 only; version 5.52 only; version 5.53 only; version 5.54 only
  • F-Secure F-Secure Anti-Virus Linux Server Security: any version; version 5.30 only; version 5.52 only; version 5.54 only
  • F-Secure F-Secure Internet Security: any version; up to and including 2010; version 7.02 only; version 2003 only; version 2004 only; version 2005 only; …
  • F-Secure Home Server Security: version 2009 only
  • F-Secure Internet Gatekeeper: up to and including 4.02; up to and including 6.61

Published 2010-04-15. Last modified 2026-06-16.