CVE-2009-1782: Multiple F-Secure anti-virus products, including Anti-Virus for Microsoft Exchange 7.10 and earlier; Intern...

Security readout for executives and security teams

This CVE describes a malware-scanning bypass in multiple legacy F-Secure anti-virus products. A remote attacker could package malware in specially crafted ZIP or RAR archives so affected F-Secure scanners may miss it. The issue undermines email, gateway, and endpoint detection rather than directly giving system control. Exposure is most plausible in legacy F-Secure email security, gateway, or endpoint deployments still scanning inbound compressed archives. Modern environments are likely exposed only if old unsupported F-Secure versions remain in production, lab, or embedded mail-filtering roles. Treat this as a legacy-control assurance issue. It is not documented here as actively exploited, but it can weaken a key malware defense where old F-Secure scanning still protects mail or web traffic. Mitigation focus: Inventory F-Secure products and versions against the CVE-listed legacy versions.; Check F-Secure advisory FSC-2009-1 for vendor-approved updates or workarounds.; Replace unsupported legacy F-Secure products if vendor fixes are unavailable..

Prepared

Jun 28, 2026, 10:45 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.