PT-2012-3247 · Eset+3 · Eset Nod32 Antivirus+3

Publicado 2012-03-21 · Atualizado 2012-08-14 · CVE-2012-1422

Positive Technologies (AI Summary)

CVSS v2.0

4.3

Média

Vetor base

AV:N/AC:M/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions Quick Heal versions 11.00 NOD32 Antivirus version 5795 Norman Antivirus version 6.06.12 Rising Antivirus version 22.83.00.03

Description The issue allows remote attackers to bypass malware detection. This is achieved via a POSIX TAR file with an initial ITSF character sequence. The estimated number of potentially affected devices worldwide is not specified.

Recommendations For Quick Heal version 11.00, update to a version that fixes the TAR file parser issue. For NOD32 Antivirus version 5795, update to a version that fixes the TAR file parser issue. For Norman Antivirus version 6.06.12, update to a version that fixes the TAR file parser issue. For Rising Antivirus version 22.83.00.03, update to a version that fixes the TAR file parser issue.

Correção

Enumeração de Fraquezas

CWE-264

Identificadores relacionados

CVE-2012-1422

Produtos afetados

Eset Nod32 Antivirus

Norman Antivirus

Quick Heal

Rising Antivirus

Referências · 5

• http://securityfocus.com/bid/52583 · Nota
• http://ieee-security.org/TC/SP2012/program.html · Nota
• http://securityfocus.com/archive/1/522005 · Nota
• http://osvdb.org/80409 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2012-1422 · Nota de Segurança