PT-2012-3248 · Emsisoft+10 · Emsisoft Anti-Malware+10

Publicado 2012-03-21 · Atualizado 2012-08-14 · CVE-2012-1423

Positive Technologies (AI Summary)

CVSS v2.0

4.3

Média

Vetor base

AV:N/AC:M/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions Command Antivirus version 5.2.11.5 Emsisoft Anti-Malware version 5.1.0.1 F-Prot Antivirus version 4.6.2.117 Fortinet Antivirus version 4.2.254.0 Ikarus Virus Utilities T3 Command Line Scanner version 1.1.97.0 K7 AntiVirus version 9.77.3565 NOD32 Antivirus version 5795 Norman Antivirus version 6.06.12 PC Tools AntiVirus version 7.0.3.5 Rising Antivirus version 22.83.00.03 VirusBuster version 13.6.151.0

Description The TAR file parser in the affected software allows remote attackers to bypass malware detection via a POSIX TAR file with an initial MZ character sequence.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Enumeração de Fraquezas

CWE-264

Identificadores relacionados

CVE-2012-1423

Produtos afetados

Command Antivirus

Emsisoft Anti-Malware

F-Prot Antivirus

Fortinet Antivirus

Ikarus Virus Utilities T3 Command Line Scanner

K7 Antivirus

Eset Nod32 Antivirus

Norman Antivirus

Pc Tools Antivirus

Rising Antivirus

Virusbuster

Referências · 8

• http://osvdb.org/80406 · Nota
• http://ieee-security.org/TC/SP2012/program.html · Nota
• http://securityfocus.com/archive/1/522005 · Nota
• http://osvdb.org/80396 · Nota
• http://osvdb.org/80407 · Nota
• http://osvdb.org/80393 · Nota
• http://osvdb.org/80395 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2012-1423 · Nota de Segurança