PT-2012-3247 · Eset+3 · Eset Nod32 Antivirus+3

Published 2012-03-21 · Updated 2012-08-14 · CVE-2012-1422

Positive Technologies (AI Summary)

CVSS v2.0

4.3

Medium

Base vector

AV:N/AC:M/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions Quick Heal versions 11.00 NOD32 Antivirus version 5795 Norman Antivirus version 6.06.12 Rising Antivirus version 22.83.00.03

Description The issue allows remote attackers to bypass malware detection. This is achieved via a POSIX TAR file with an initial ITSF character sequence. The estimated number of potentially affected devices worldwide is not specified.

Recommendations For Quick Heal version 11.00, update to a version that fixes the TAR file parser issue. For NOD32 Antivirus version 5795, update to a version that fixes the TAR file parser issue. For Norman Antivirus version 6.06.12, update to a version that fixes the TAR file parser issue. For Rising Antivirus version 22.83.00.03, update to a version that fixes the TAR file parser issue.

Fix

Weakness Enumeration

CWE-264

Related Identifiers

CVE-2012-1422

Affected Products

Eset Nod32 Antivirus

Norman Antivirus

Quick Heal

Rising Antivirus

References · 5

• https://nvd.nist.gov/vuln/detail/CVE-2012-1422 · Security Note
• http://securityfocus.com/bid/52583 · Note
• http://ieee-security.org/TC/SP2012/program.html · Note
• http://securityfocus.com/archive/1/522005 · Note
• http://osvdb.org/80409 · Note