CVE:CVE-2013-7369
CNNVD:CNNVD-201404-373
F-Secure Anti-Virus、F-Secure Email and Server Security和F-Secure Server Security都是芬兰F-Secure公司的安全产品。F-Secure Anti-Virus是一套杀毒软件；F-Secure Email and Server Security和F-Secure Server Security分别对电子邮件和文件服务器提供防病毒和恶意软件防护功能。
多款F-Secure产品的FSDBCom ActiveX控件中的DLL文件存在SQL注入漏洞。远程攻击者可利用该漏洞执行任意SQL命令。以下产品及版本受到影响：F-Secure Anti-Virus for Microsoft Exchange Server 9.00和9.10版本，Anti-Virus for Windows Servers 9.00版本，Anti-Virus for Citrix Servers 9.00版本，F-Secure Email and Server Security 9.20版本，F-Secure Server Security 9.20版本,Solutions based on F-Secure Protection Service for Business Email and Server Security 9.20版本，Solutions based on F-Secure Protection Service for Business Server Security 9.20版本。
solution:Upgrade f-secure anti-virus to a higher version than 9.00,9.10,and avoid the version 9.00,9.10; Upgrade f-secure email_and_server_security to a higher version than 9.20,and avoid the version 9.20; Upgrade f-secure server_security to a higher version than 9.20,and avoid the version 9.20