CVE-2020-9342

—

CVSS 3.1

5.5 medium

EPSS

2%p75

Published

Feb 22, 2020 (Feb 22, 2020)

Modified

Jun 17, 2026

Description

The F-Secure AV parsing engine before 2020-02-05 allows virus-detection bypass via crafted Compression Method data in a GZIP archive. This affects versions before 17.0.605.474 (on Linux) of Cloud Protection For Salesforce, Email and Server Security, and Internet GateKeeper.

Vendors: f-secure
Products: cloud protection for salesforce, email and server security, internet gatekeeper
Weakness: CWE-436
Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N

NVD CVE.org GitHub PoCs EPSS (1.6%)

In the news0 stories

No ingested article mentions this CVE yet.