PT-2005-4039 · Softguy+4 · Powerzip+5

Froggz · Published 2005-10-14 · Updated 2021-04-09 · CVE-2005-3225

Positive Technologies (AI Summary)

CVSS v2.0

5.1

Medium

Base vector

AV:N/AC:H/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions eTrust-Iris (affected versions not specified) eTrust-Vet Antivirus (affected versions not specified)

Description The issue allows remote attackers to bypass virus detection via a malicious executable in a specially crafted RAR file with malformed central and local headers. This can still be opened by products such as Winrar and PowerZip, even though they are rejected as corrupted by Winzip and BitZipper.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Related Identifiers

CVE-2005-3225

Affected Products

Bitzipper

Powerzip

Winrar

Winzip

Etrust-Iris

Ca Etrust Vet Antivirus

References · 4

• https://nvd.nist.gov/vuln/detail/CVE-2005-3225 · Security Note
• http://marc.info/?l=bugtraq&m=112879611919750&w=2 · Note
• https://t.me/cvenotify/12991 · Telegram Post
• http://shadock.net/secubox/AVCraftedArchive.html · Note