Secunia

A vulnerability has been reported in F-Secure Internet Gatekeeper and F-Secure Anti-Virus for Microsoft Exchange, which can be exploited by malicious people to cause a DoS (Denial of Service).

The vulnerability is caused due to an input validation error within the exception handling in the F-Secure Content Scanner Server component. This can be exploited to crash a process ("fsavsd.exe") in the component via specially crafted packets.

NOTE: The process is reportedly started automatically within 30 to 40 seconds by a watchdog service.

Solution
Update to F-Secure Internet Gatekeeper 6.40 or F-Secure Anti-Virus for Microsoft Exchange 6.30 or apply F-Secure Content Scanner Server 6.31 hotfix 4.
Further details available in Customer Area

Provided and/or discovered by
Discovered by anonymous person and reported via iDEFENSE.

Changelog
Further details available in Customer Area

Original Advisory
F-Secure:
http://www.f-secure.com/security/fsc-2004-2.shtml

iDEFENSE:
http://www.idefense.com/application/poi/display?id=137&type=vulnerabilities

Deep Links
Links available in Customer Area