PT-2012-3244 · Cisco+1 · Clamav+1

Publicado 2012-03-21 · Atualizado 2012-08-14 · CVE-2012-1419

Positive Technologies (AI Summary)

CVSS v2.0

4.3

Média

Vetor base

AV:N/AC:M/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions ClamAV version 0.96.4 Quick Heal version 11.00

Description The issue concerns the TAR file parser, which allows remote attackers to bypass malware detection. This is achieved by using a POSIX TAR file that contains an initial [aliases] character sequence.

Recommendations For ClamAV version 0.96.4, update to a newer version that addresses this issue. For Quick Heal version 11.00, update to a newer version that addresses this issue. As a temporary workaround, consider restricting the use of TAR file parsing functionality until a patch is available.

Correção

Enumeração de Fraquezas

CWE-264

Identificadores relacionados

CVE-2012-1419

Produtos afetados

Clamav

Quick Heal

Referências · 8

• https://osv.dev/vulnerability/CVE-2012-1419 · Aviso do Fabricante
• http://ieee-security.org/TC/SP2012/program.html · Nota
• http://securityfocus.com/archive/1/522005 · Nota
• http://osvdb.org/80409 · Nota
• http://securityfocus.com/bid/52572 · Nota
• https://security-tracker.debian.org/tracker/CVE-2012-1419 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2012-1419 · Nota de Segurança
• https://osv.dev/vulnerability/DEBIAN-CVE-2012-1419 · Aviso do Fabricante