PT-2012-3288 · Bitdefender+11 · Bitdefender+11

Benedikt Driessen + 4 · Publicado 2012-03-21 · Atualizado 2017-08-29 · CVE-2012-1463

Positive Technologies (AI Summary)

CVSS v2.0

4.3

Média

Vetor base

AV:N/AC:M/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions AhnLab V3 Internet Security version 2011.01.18.00 Bitdefender version 7.2 Quick Heal version 11.00 Command Antivirus version 5.2.11.5 Comodo Antivirus version 7424 eSafe version 7.0.17.0 F-Prot Antivirus version 4.6.2.117 F-Secure Anti-Virus version 9.0.16160.0 McAfee Anti-Virus Scanning Engine version 5.400.0.1158 Norman Antivirus version 6.06.12 nProtect Anti-Virus version 2011-01-17.01 Panda Antivirus version 10.0.2.7

Description The ELF file parser in the affected software allows remote attackers to bypass malware detection via an ELF file with a modified endianness field.

Recommendations For AhnLab V3 Internet Security version 2011.01.18.00, update to a newer version that fixes the ELF file parser issue. For Bitdefender version 7.2, update to a newer version that fixes the ELF file parser issue. For Quick Heal version 11.00, update to a newer version that fixes the ELF file parser issue. For Command Antivirus version 5.2.11.5, update to a newer version that fixes the ELF file parser issue. For Comodo Antivirus version 7424, update to a newer version that fixes the ELF file parser issue. For eSafe version 7.0.17.0, update to a newer version that fixes the ELF file parser issue. For F-Prot Antivirus version 4.6.2.117, update to a newer version that fixes the ELF file parser issue. For F-Secure Anti-Virus version 9.0.16160.0, update to a newer version that fixes the ELF file parser issue. For McAfee Anti-Virus Scanning Engine version 5.400.0.1158, update to a newer version that fixes the ELF file parser issue. For Norman Antivirus version 6.06.12, update to a newer version that fixes the ELF file parser issue. For nProtect Anti-Virus version 2011-01-17.01, update to a newer version that fixes the ELF file parser issue. For Panda Antivirus version 10.0.2.7, update to a newer version that fixes the ELF file parser issue.

Correção

Enumeração de Fraquezas

CWE-264

Identificadores relacionados

CVE-2012-1463

Produtos afetados

Ahnlab V3 Internet Security

Bitdefender

Command Antivirus

Comodo Antivirus

F-Prot Antivirus

F-Secure Anti-Virus

Mcafee Anti-Virus Scanning Engine

Norman Antivirus

Panda Antivirus

Quick Heal

Esafe

Nprotect Anti-Virus

Referências · 7

• https://nvd.nist.gov/vuln/detail/CVE-2012-1463 · Nota de Segurança
• http://osvdb.org/80433 · Nota
• http://ieee-security.org/TC/SP2012/program.html · Nota
• http://securityfocus.com/bid/52614 · Nota
• http://securityfocus.com/archive/1/522005 · Nota
• http://osvdb.org/80426 · Nota
• https://exchange.xforce.ibmcloud.com/vulnerabilities/74311 · Nota