F-Secure Anti-Virus hotfixes

Subscribe
Subscribe to Maintenance Release Notification Mailing Lists

Important
If you have a product whose version is no longer supported, it is recommended that you upgrade the product to its latest version. To view the list of supported F-Secure products, click here. To upgrade your product to its latest version, visit F-Secure® WebClub.

What to download?
Click this icon to download the hotfix for a stand-alone installation of an F-Secure product.
Click this icon to download the hotfix for a centrally administrated environment.

For important information about the hotfix installation, please refer to the hotfix installation FAQ.

F-Secure Anti-Virus for Citrix Servers 5.52

• All supported platforms

This hotfix is required to ensure that the getdbhtp.exe tool can cope with updates published after July 2008. If you have centrally managed installation or F-Secure Backweb installed on the same system running Anti-Virus, installing this hotfix is not necessary.

Note: A reboot is not required after installing this hotfix.

F-Secure Anti-Virus for Workstations version 7.11

F-Secure Anti-Virus for Servers version 7.01

• All supported platforms

This hotfix includes scanning engine improvements and solves various issues related to mediocre system performance during startup.

Applicable for F-Secure Anti-Virus for Workstation 7.11: This hotfix also includes the fixes implemented for F-Secure Security Bulletin FSC-2008-2.

Note: A reboot is not required after installing the hotfix.

F-Secure Anti-Virus for Workstations versions 7.10 and 7.11

• All supported platforms

This hotfix solves the following archive handing vulnerability: specially crafted archives can cause a product malfunction which may lead to unhandled exceptions visible as product crash, hang and/or possible remote code execution.

This vulnerability is described in more detail in FSC-2008-2.

Note: A reboot is not required after installing the hotfix.

F-Secure Anti-Virus for Windows Servers versions 7.00 and 7.01

• All supported platforms

This hotfix solves the following archive handing vulnerability: specially crafted archives can cause a product malfunction which may lead to unhandled exceptions visible as product crash, hang and/or possible remote code execution.

This vulnerability is described in more detail in FSC-2008-2.

Note: A reboot is not required after installing the hotfix.

F-Secure Anti-Virus for Citrix Servers version 5.52

• All supported platforms

This hotfix solves the following archive handing vulnerability: specially crafted archives can cause a product malfunction which may lead to unhandled exceptions visible as product crash, hang and/or possible remote code execution.

This vulnerability is described in more detail in FSC-2008-2.

Note: A reboot is not required after installing the hotfix.

F-Secure Anti-Virus for Citrix Servers version 7.00

• All supported platforms

This hotfix solves the following archive handing vulnerability: specially crafted archives can cause a product malfunction which may lead to unhandled exceptions visible as product crash, hang and/or possible remote code execution.

This vulnerability is described in more detail in FSC-2008-2.

Note: A reboot is not required after installing the hotfix.

F-Secure Anti-Virus for Workstations 5.44

• All supported platforms

This hotfix solves a problem where specially crafted CAB and RAR archives can bypass antivirus scanning.

These vulnerabilities have been described in security advisory FSC-2008-1.

Note: A reboot is required.

F-Secure Anti-Virus for Workstations 7.00-7.10

• All supported platforms

This hotfix solves a problem where specially crafted CAB and RAR archives can bypass antivirus scanning.

These vulnerabilities have been described in security advisory FSC-2008-1.

Note: A reboot is required.

F-Secure Anti-Virus for Windows Servers 7.00

• All supported platforms

This hotfix solves a problem where specially crafted CAB and RAR archives can bypass antivirus scanning.

These vulnerabilities have been described in security advisory FSC-2008-1.

Note: A reboot is required.

F-Secure Anti-Virus for Windows Servers 7.00

• All supported platforms

This hotfix solves a problem where specially crafted CAB and RAR archives can bypass antivirus scanning.

These vulnerabilities have been described in security advisory FSC-2008-1.

Note: A reboot is required.

F-Secure Anti-Virus for Citrix Servers 5.52

• All supported platforms

This hotfix solves a problem where specially crafted CAB and RAR archives can bypass antivirus scanning.

These vulnerabilities have been described in security advisory FSC-2008-1.

Note: A reboot is required.

F-Secure Anti-Virus for Workstations 7.10

• All supported platforms

If you are running any of the products mentioned and experience problems when downloading database updates, we recommend that you install this hotfix. It upgrades the whole F-Secure Automatic Update Agent module (fsaua.exe) to version 8.22 build 2302.

No reboot is required after installing the hotfix.

F-Secure Anti-Virus for Windows Servers v.7.00

This hotfix solves a problem in the FSrec.sys component on a Windows Server 2003 acting as a domain controller.

This hotfix also includes the previous F-Secure Anti-Virus for Servers Hotfix FSAV720-01; its description can be found below.

F-Secure Anti-Virus for Workstations version 5.44

• All supported platforms

This hotfix improves product's robustness against communication failures between the host and Policy Manager Server. We recommend this hotfix for all users of F-Secure Anti-Virus for Workstations version 5.44 where the installation is centrally managed through Policy Manager Console.

F-Secure Anti-Virus for Windows Servers v.7.00

Note: This hotfix has been replaced by F-Secure Anti-Virus for Servers Hotfix FSAV720-02, available on this same page.

This hotfix solves the following vulnerability:

Placing a specially crafted archive or packed executable into the system32 folder may allow an attacker to bypass F-Secure's antivirus.

Note that the issue only exists on 64-bit server platforms.

System reboot is not required.

This vulnerability is described in detail in F-Secure Security Bulletin FSC-2007-6.

F-Secure Anti-Virus for Workstations 7.00

• All supported platforms

This hotfix solves the issue where the F-Secure Management Agent fails to upload new statistics and download new base policies after a few days of operation. The installation of this hotfix is recommended if the target system running the above product is not regularly rebooted.

Note: Reboot is not required since the F-Secure Management Agent is shut down when the hotfix is installed.

F-Secure Anti-Virus for Servers 7.00

• All supported platforms

This hotfix solves the issue where the F-Secure Management Agent fails to upload new statistics and download new base policies after a few days of operation. The installation of this hotfix is recommended if the target system running the above product is not regularly rebooted.

Note: Reboot is not required since the F-Secure Management Agent is shut down when the hotfix is installed.

Anti-Virus for Workstations 7.00

• all supported platforms

This hotfix solves the performance problem occurring when opening MS Office documents. If opening of MS Office Word and Excel files takes exceptionally long, download and install this hotfix.

F-Secure Anti-Virus for Windows Servers v.5.52 and earlier

F-Secure Anti-Virus for Citrix Servers v.5.52 and earlier

• All supported platforms

Note: There is a new version available at http://www.f-secure.com/webclub/fsavsrv.html to upgrade F-Secure Anti-Virus for Windows Servers to version 7.00. In the new version, the described vulnerabilities have been solved. It is recommended that you download the new version instead of the hotfix. However, if the new version is not feasible, download this hotfix.

This hotfix solves the following vulnerabilities:

• Several F-Secure products have a buffer overflow vulnerability in processing LHA archives. This may allow an attacker to execute arbitrary code or to create a denial-of-service condition. This vulnerability is related to a similar vulnerability in GZIP program’s handling of LZH-compressed archives.
  This vulnerability is described in detail in F-Secure Security Bulletin FSC-2007-1.
  
• IOCTL (Input/Output Control) vulnerability in Real-time Scanning component may allow an attacker to gain elevated privileges to the system.
  This vulnerability is described in detail in F-Secure Security Bulletin FSC-2007-2.

F-Secure Anti-Virus for Workstations version 5.44 and earlier

• All supported platforms

Note: There is a new version available at http://www.f-secure.com/webclub/fsavwks.html to upgrade F-Secure Anti-Virus for Workstations to version 7.00. In the new version, the described vulnerabilities have been solved. It is recommended that you download the new version instead of the hotfix. However, if the new version is not feasible, download this hotfix.

This hotfix solves the following vulnerabilities:

• Several F-Secure products have a buffer overflow vulnerability in processing LHA archives. This may allow an attacker to execute arbitrary code or to create a denial-of-service condition. This vulnerability is related to a similar vulnerability in GZIP program’s handling of LZH-compressed archives.
  This vulnerability is described in detail in F-Secure Security Bulletin FSC-2007-1.
  
• IOCTL (Input/Output Control) vulnerability in Real-time Scanning component may allow an attacker to gain elevated privileges to the system.
  This vulnerability is described in detail in F-Secure Security Bulletin FSC-2007-2.

1. related to specially crafted ZIP and RAR archives. The vulnerabilities may be used to execute code on affected systems and avoid successful scanning of the archive files.
2. where a) the name of an executable has been modified in a certain way or b) the "Scan network" setting has been disabled and scanning of removable drives fails.