PT-2005-4176 · Mcafee · Mcafee Corporate+1

Andrey Bayora · Publicado 2005-10-29 · Atualizado 2016-10-18 · CVE-2005-3377

Positive Technologies (AI Summary)

CVSS v2.0

5.1

Média

Vetor base

AV:N/AC:H/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions McAfee Internet Security Suite version 9.1.08 McAfee Corporate version 8.0.0 patch 10

Description The issue allows remote attackers to bypass virus scanning by using files with an "MZ" magic byte sequence, which is normally associated with executable files. This causes the file to be treated as a safe type, even though it could still be executed as a dangerous file type by applications on the end system. For example, a "triple headed" program containing executable, email, and HTML content can exploit this issue.

Recommendations For McAfee Internet Security Suite version 9.1.08, update the engine to a version that fixes the multiple interpretation error. For McAfee Corporate version 8.0.0 patch 10, apply a patch that addresses the issue with the 4400 engine.

Correção

Identificadores relacionados

CVE-2005-3377

Produtos afetados

Mcafee Corporate

Ca Internet Security Suite

Referências · 6

• http://securityelf.org/magicbyteadv.html · Aviso do Fabricante
• http://marc.info/?l=bugtraq&m=113026417802703&w=2 · Nota
• http://securityfocus.com/bid/15189 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2005-3377 · Nota de Segurança
• http://securityelf.org/magicbyte.html · Nota
• http://securityelf.org/updmagic.html · Nota