PT-2012-6301 · Sophos+9 · Sophos Anti-Virus+9

Publicado 2012-03-21 · Atualizado 2012-03-21

Positive Technologies (AI Summary)

Name of the Vulnerable Software and Affected Versions Bitdefender version 7.2 Command Antivirus version 5.2.11.5 Comodo Antivirus version 7424 eSafe version 7.0.17.0 F-Prot Antivirus version 4.6.2.117 F-Secure Anti-Virus version 9.0.16160.0 McAfee Gateway version 2010.1C nProtect Anti-Virus version 2011-01-17.01 Sophos Anti-Virus version 4.61.0 Rising Antivirus version 22.83.00.03

Description The ELF file parser in the affected software allows remote attackers to bypass malware detection via an ELF file with a x4ax46x49x46 character sequence at a certain location.

Recommendations For Bitdefender version 7.2, update to a version that fixes the ELF file parser issue. For Command Antivirus version 5.2.11.5, update to a version that fixes the ELF file parser issue. For Comodo Antivirus version 7424, update to a version that fixes the ELF file parser issue. For eSafe version 7.0.17.0, update to a version that fixes the ELF file parser issue. For F-Prot Antivirus version 4.6.2.117, update to a version that fixes the ELF file parser issue. For F-Secure Anti-Virus version 9.0.16160.0, update to a version that fixes the ELF file parser issue. For McAfee Gateway version 2010.1C, update to a version that fixes the ELF file parser issue. For nProtect Anti-Virus version 2011-01-17.01, update to a version that fixes the ELF file parser issue. For Sophos Anti-Virus version 4.61.0, update to a version that fixes the ELF file parser issue. For Rising Antivirus version 22.83.00.03, update to a version that fixes the ELF file parser issue.

Identificadores relacionados

PYSEC-2012-23

Produtos afetados

Bitdefender

Command Antivirus

Comodo Antivirus

F-Prot Antivirus

F-Secure Anti-Virus

Mcafee Gateway

Rising Antivirus

Sophos Anti-Virus

Esafe

Nprotect Anti-Virus

Referências · 3

• http://securityfocus.com/archive/1/522005 · Nota
• https://osv.dev/vulnerability/PYSEC-2012-23 · Aviso do Fabricante
• http://ieee-security.org/TC/SP2012/program.html · Nota