PT-2012-3272 · Fortinet+3 · Fortinet Antivirus+3

Publicado 2012-03-21 · Atualizado 2017-12-06 · CVE-2012-1447

Positive Technologies (AI Summary)

CVSS v2.0

4.3

Média

Vetor base

AV:N/AC:M/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions Fortinet Antivirus version 4.2.254.0 eSafe version 7.0.17.0 Dr.Web version 5.0.2.03300 Panda Antivirus version 10.0.2.7

Description The issue allows remote attackers to bypass malware detection by utilizing an ELF file with a modified e version field. This could potentially lead to undetected malware.

Recommendations For Fortinet Antivirus version 4.2.254.0, update the ELF file parser to correctly handle modified e version fields. For eSafe version 7.0.17.0, update the ELF file parser to correctly handle modified e version fields. For Dr.Web version 5.0.2.03300, update the ELF file parser to correctly handle modified e version fields. For Panda Antivirus version 10.0.2.7, update the ELF file parser to correctly handle modified e version fields.

Correção

Enumeração de Fraquezas

CWE-264

Identificadores relacionados

CVE-2012-1447

Produtos afetados

Dr.Web

Fortinet Antivirus

Panda Antivirus

Esafe

Referências · 6

• http://ieee-security.org/TC/SP2012/program.html · Nota
• http://securityfocus.com/archive/1/522005 · Nota
• http://osvdb.org/80432 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2012-1447 · Nota de Segurança
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-1447 · Nota
• http://securityfocus.com/bid/52601 · Nota