By the way,according to @risk, F-Secure has 2 problems:
Malformed LHA Archive Buffer Overflow and
Content Detection Bypass
Norton has one
Remote Code Execution
I didn’t see anything about avast
-max