CVE-2023-47263: High severity withsecure client security vulnerability
Certain WithSecure products allow a Denial of Service (DoS) in the antivirus engine when scanning a fuzzed PE32 file. This affects WithSecure Client Security 15, WithSecure Server Security 15, WithSecure Email and Server Security 15, WithSecure Elements Endpoint Protection 17 and later, WithSecure Client Security for Mac 15, WithSecure Elements Endpoint Protection for Mac 17 and later, WithSecure Linux Security 64 12.0, WithSecure Linux Protection 12.0, and WithSecure Atlant (formerly F-Secure Atlant) 15 and later.
Affected Software
Event History
Frequently Asked Questions
What is CVE-2023-47263?
CVE-2023-47263 is a vulnerability that allows a Denial of Service (DoS) in the antivirus engine when scanning a fuzzed PE32 file in certain WithSecure products.
Which products are affected by CVE-2023-47263?
CVE-2023-47263 affects WithSecure Client Security 15, WithSecure Server Security 15, WithSecure Email and Server Security 15, WithSecure Elements Endpoint Protection 17 and later, and WithSecure Atlant.
What is the severity of CVE-2023-47263?
CVE-2023-47263 has a severity value of 7.5, which is considered high.
How does CVE-2023-47263 impact the affected products?
CVE-2023-47263 allows an attacker to perform a Denial of Service (DoS) attack on the antivirus engine by scanning a fuzzed PE32 file in the affected WithSecure products.
How can I fix CVE-2023-47263?
To fix CVE-2023-47263, it is recommended to update the affected WithSecure products to a version that includes a patch for the vulnerability.