PT-2012-3283 · Sophos+2 · Sophos Anti-Virus+2

Publicado 2012-03-21 · Atualizado 2024-06-15 · CVE-2012-1458

Positive Technologies (AI Summary)

CVSS v2.0

4.3

Média

Vetor base

AV:N/AC:M/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions ClamAV version 0.96.4 Sophos Anti-Virus version 4.61.0

Description The issue allows remote attackers to bypass malware detection through a crafted reset interval in the LZXC header of a CHM file.

Recommendations For ClamAV version 0.96.4, update to a newer version that contains a fix for this issue. For Sophos Anti-Virus version 4.61.0, update to a newer version that contains a fix for this issue.

Correção

Enumeração de Fraquezas

CWE-264

Identificadores relacionados

CVE-2012-1458

OPENSUSE-SU-2024:10571-1

Produtos afetados

Clamav

Sophos Anti-Virus

Suse

Referências · 29

• https://suse.com/security/cve/CVE-2015-2221 · Nota
• http://lists.opensuse.org/opensuse-security-announce/2012-07/msg00002.html · Aviso do Fabricante
• https://osv.dev/vulnerability/DEBIAN-CVE-2012-1458 · Aviso do Fabricante
• https://suse.com/security/cve/CVE-2015-2222 · Nota
• https://suse.com/security/cve/CVE-2012-1459 · Nota
• http://securityfocus.com/bid/52611 · Nota
• https://suse.com/security/cve/CVE-2015-2668 · Nota
• https://suse.com/security/cve/CVE-2015-2305 · Nota
• https://security-tracker.debian.org/tracker/CVE-2012-1458 · Aviso do Fabricante
• https://suse.com/security/cve/CVE-2010-0405 · Nota
• https://suse.com/security/cve/CVE-2011-2721 · Nota
• https://suse.com/security/cve/CVE-2011-3627 · Nota
• https://osv.dev/vulnerability/CVE-2012-1458 · Aviso do Fabricante
• http://mandriva.com/security/advisories?name=MDVSA-2012:094 · Aviso do Fabricante
• http://osvdb.org/80474 · Nota