PT-2012-3280 · Eset+1 · Eset Nod32 Antivirus+1

Publicado 2012-03-21 · Atualizado 2017-12-06 · CVE-2012-1455

Positive Technologies (AI Summary)

CVSS v2.0

4.3

Média

Vetor base

AV:N/AC:M/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions NOD32 Antivirus version 5795 Rising Antivirus version 22.83.00.03

Description The issue allows remote attackers to bypass malware detection. This is achieved through a CAB file with a modified vMinor version field in the CAB file parser.

Recommendations For NOD32 Antivirus version 5795, update the CAB file parser to correctly handle modified vMinor version fields. For Rising Antivirus version 22.83.00.03, update the CAB file parser to correctly handle modified vMinor version fields. As a temporary workaround, consider restricting the use of CAB files until a patch is available.

Correção

Enumeração de Fraquezas

CWE-264

Identificadores relacionados

CVE-2012-1455

Produtos afetados

Eset Nod32 Antivirus

Rising Antivirus

Referências · 4

• https://nvd.nist.gov/vuln/detail/CVE-2012-1455 · Nota de Segurança
• http://ieee-security.org/TC/SP2012/program.html · Nota
• http://securityfocus.com/archive/1/522005 · Nota
• http://securityfocus.com/bid/52607 · Nota