PT-2012-3251 · K7 Computing+5 · K7 Antivirus+5

Benedikt Driessen + 4 · Publicado 2012-03-21 · Atualizado 2017-08-29 · CVE-2012-1426

Positive Technologies (AI Summary)

CVSS v2.0

4.3

Média

Vetor base

AV:N/AC:M/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions Quick Heal versions 11.00 Command Antivirus version 5.2.11.5 F-Prot Antivirus version 4.6.2.117 K7 AntiVirus version 9.77.3565 Norman Antivirus version 6.06.12 Rising Antivirus version 22.83.00.03

Description The issue allows remote attackers to bypass malware detection via a POSIX TAR file with an initial x42x5Ax68 character sequence.

Recommendations For Quick Heal version 11.00, update to a version that fixes the TAR file parser issue. For Command Antivirus version 5.2.11.5, update to a version that fixes the TAR file parser issue. For F-Prot Antivirus version 4.6.2.117, update to a version that fixes the TAR file parser issue. For K7 AntiVirus version 9.77.3565, update to a version that fixes the TAR file parser issue. For Norman Antivirus version 6.06.12, update to a version that fixes the TAR file parser issue. For Rising Antivirus version 22.83.00.03, update to a version that fixes the TAR file parser issue.

Correção

Enumeração de Fraquezas

CWE-264

Identificadores relacionados

CVE-2012-1426

Produtos afetados

Command Antivirus

F-Prot Antivirus

K7 Antivirus

Norman Antivirus

Quick Heal

Rising Antivirus

Referências · 8

• http://osvdb.org/80406 · Nota
• https://exchange.xforce.ibmcloud.com/vulnerabilities/74241 · Nota
• http://ieee-security.org/TC/SP2012/program.html · Nota
• http://securityfocus.com/archive/1/522005 · Nota
• http://osvdb.org/80409 · Nota
• http://osvdb.org/80407 · Nota
• http://securityfocus.com/bid/52585 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2012-1426 · Nota de Segurança