PT-2005-4178 · Trend Micro · Trend Micro Officescan+1

Andrey Bayora · Publicado 2005-10-29 · Atualizado 2018-10-19 · CVE-2005-3379

Positive Technologies (AI Summary)

CVSS v2.0

5.1

Média

Vetor base

AV:N/AC:H/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Trend Micro PC-Cillin version 12.0.1244 Trend Micro OfficeScan version 7.0

Description The issue allows remote attackers to bypass virus scanning by using files with an "MZ" magic byte sequence, which is normally associated with executable files. This causes the file to be treated as a safe type, even though it could still be executed as a dangerous file type by applications on the end system. This can be demonstrated by a "triple headed" program that contains executable, email, and HTML content.

Recommendations For Trend Micro PC-Cillin version 12.0.1244, update the virus scanning engine to a version that correctly identifies and scans files with the "MZ" magic byte sequence. For Trend Micro OfficeScan version 7.0, update the virus scanning engine to a version that correctly identifies and scans files with the "MZ" magic byte sequence.

Correção

Identificadores relacionados

CVE-2005-3379

Produtos afetados

Trend Micro Officescan

Trend Micro Pc-Cillin

Referências · 8

• http://securityfocus.com/archive/1/415173 · Nota
• http://securityelf.org/magicbyteadv.html · Aviso do Fabricante
• http://marc.info/?l=bugtraq&m=113026417802703&w=2 · Nota
• http://securityfocus.com/bid/15189 · Nota
• http://securityelf.org/updmagic.html · Nota
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-3379 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2005-3379 · Nota de Segurança
• http://securityelf.org/magicbyte.html · Nota