CVE-2013-7369
18.04.2014, 14:55
SQL injection vulnerability in an unspecified DLL in the FSDBCom ActiveX control in F-Secure Anti-Virus for Microsoft Exchange Server before HF02, Anti-Virus for Windows Servers 9.00 before HF09, Anti-Virus for Citrix Servers 9.00 before HF09, and F-Secure Email and Server Security and F-Secure Server Security 9.20 before HF01 allows remote attackers to execute arbitrary SQL commands via unknown vectors, related to GetCommand.
| Vendor | Product | Version |
|---|---|---|
| f-secure | anti-virus | 9.00 |
| f-secure | anti-virus | 9.00 |
| f-secure | anti-virus | 9.00 |
| f-secure | anti-virus | 9.10 |
| f-secure | email_and_server_security | 9.20 |
| f-secure | server_security | 9.20 |
𝑥
= Vulnerable software versions