cve/2021/CVE-2021-40837.md

### [CVE-2021-40837](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-40837)
![](https://img.shields.io/static/v1?label=Product&message=F-Secure%20endpoint%20protection%20products%20on%20Windows%20and%20Mac.%20F-Secure%20Linux%20Security%20(32-bit)%2C%20F-Secure%20Linux%20Security%2064%2C%20F-Secure%20Atlant%2C%20F-Secure%20Internet%20Gatekeeper%20%26%20F-Secure%20Security%20Cloud&color=blue)
![](https://img.shields.io/static/v1?label=Version&message=All%20Version%20%20&color=brightgreen)
![](https://img.shields.io/static/v1?label=Vulnerability&message=Denial%20of%20Service%20Vulnerability%20&color=brightgreen)

### Description

A vulnerability affecting F-Secure antivirus engine before Capricorn update 2022-02-01_01 was discovered whereby decompression of ACE file causes the scanner service to stop. The vulnerability can be exploited remotely by an attacker. A successful attack will result in denial-of-service of the antivirus engine.

### POC

#### Reference
- https://www.f-secure.com/en/business/support-and-downloads/security-advisories

#### Github
- https://github.com/ARPSyndicate/cvemon
- https://github.com/Team-BT5/WinAFL-RDP
- https://github.com/bacon-tomato-spaghetti/WinAFL-RDP
- https://github.com/googleprojectzero/winafl
- https://github.com/ssumachai/CS182-Project
- https://github.com/yrime/WinAflCustomMutate