F-Secure Personal Express vulnerabilities

5 CVEs affecting F-Secure Personal Express, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2006-0338, published 2006-01-21.

More from F-Secure.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2004-2442, published 2004-12-31. Medium severity, CVSS 5.0. EPSS: 10.6% chance of exploitation in the next 30 days. Multiple interpretation error in various F-Secure Anti-Virus products, including Workstation 5.43 and earlier, Windows Servers 5.50 and earlier, MIMEsweeper 5.50 and earlier, Anti-Virus for Linux…
• CVE-2004-0234, published 2004-08-18. High severity, CVSS 10.0. EPSS: 10.3% chance of exploitation in the next 30 days. Multiple stack-based buffer overflows in the get_header function in header.c for LHA 1.14, as used in products such as Barracuda Spam Firewall, allow remote attackers or local users to execute…
• CVE-2004-0235, published 2004-08-18. Medium severity, CVSS 6.4. EPSS: 4.1% chance of exploitation in the next 30 days. Multiple directory traversal vulnerabilities in LHA 1.14 allow remote attackers or local users to create arbitrary files via an LHA archive containing filenames with (1) .. sequences or (2) absolute…
• CVE-2005-0350, published 2005-05-02. High severity, CVSS 7.5. EPSS: 3.3% chance of exploitation in the next 30 days. Heap-based buffer overflow in multiple F-Secure Anti-Virus and Internet Security products allows remote attackers to execute arbitrary code via a crafted ARJ archive.
• CVE-2006-0338, published 2006-01-21. Medium severity, CVSS 5.0. EPSS: 3% chance of exploitation in the next 30 days. Multiple F-Secure Anti-Virus products and versions for Windows and Linux, including Anti-Virus for Windows Servers 5.52 and earlier, Internet Security 2004, 2005 and 2006, and Anti-Virus for Linux…