File-Extension Filtering Vulnerability in Proofpoint Enterprise Protection

CVE-2019-19680

Summary

A file-extension filtering vulnerability exists in Proofpoint Enterprise Protection (PPS / PoD) that allows malicious actors to exploit flaws in the filtering mechanisms for file extensions and MIME types. This vulnerability affects unpatched versions of PPS through 8.9.22 and PoD through 8.14.2, enabling attackers to send malformed multipart emails that can bypass virus detection and potentially compromise system integrity.

References