CVE-2010-1425: F-Secure Internet Security 2010 and earlier; Anti-Virus for Microsoft Exchange 9 and earlier, and for MIMEs...

Security readout for executives and security teams

This CVE is a malware-detection bypass in many older F-Secure consumer, server, email, gateway, Mac, Linux, Citrix, and Exchange products. Crafted 7Z, GZIP, CAB, or RAR archives could make malicious content easier to pass through scanning. The main business risk is reduced protection where these legacy products are still trusted for email, gateway, or endpoint filtering. Exposure is most likely in legacy environments still running F-Secure Internet Security 2010-era products, F-Secure email/security gateway products, or older Exchange/MIMEsweeper integrations. Modern environments are likely unaffected if these products were upgraded or retired, but inventory should confirm that assumption. Prioritize this if legacy F-Secure products still protect email gateways, Exchange servers, or endpoints. The issue weakens malware filtering rather than directly granting access, but it can undermine a critical prevention layer. If no affected products remain, close with evidence from asset inventory. Mitigation focus: Inventory F-Secure endpoint, mail, gateway, server, Mac, Linux, and Citrix deployments.; Review F-Secure advisory FSC-2010-1 for vendor-approved updates or upgrade guidance.; Upgrade or retire unsupported F-Secure products named in the CVE description..

Prepared

Jun 28, 2026, 02:49 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.