PT-2012-3248 · Emsisoft+10 · Emsisoft Anti-Malware+10

Published 2012-03-21 · Updated 2012-08-14 · CVE-2012-1423

Positive Technologies (AI Summary)

CVSS v2.0

4.3

Medium

Base vector

AV:N/AC:M/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions Command Antivirus version 5.2.11.5 Emsisoft Anti-Malware version 5.1.0.1 F-Prot Antivirus version 4.6.2.117 Fortinet Antivirus version 4.2.254.0 Ikarus Virus Utilities T3 Command Line Scanner version 1.1.97.0 K7 AntiVirus version 9.77.3565 NOD32 Antivirus version 5795 Norman Antivirus version 6.06.12 PC Tools AntiVirus version 7.0.3.5 Rising Antivirus version 22.83.00.03 VirusBuster version 13.6.151.0

Description The TAR file parser in the affected software allows remote attackers to bypass malware detection via a POSIX TAR file with an initial MZ character sequence.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Weakness Enumeration

CWE-264

Related Identifiers

CVE-2012-1423

Affected Products

Command Antivirus

Emsisoft Anti-Malware

F-Prot Antivirus

Fortinet Antivirus

Ikarus Virus Utilities T3 Command Line Scanner

K7 Antivirus

Eset Nod32 Antivirus

Norman Antivirus

Pc Tools Antivirus

Rising Antivirus

Virusbuster

References · 8

• https://nvd.nist.gov/vuln/detail/CVE-2012-1423 · Security Note
• http://osvdb.org/80406 · Note
• http://ieee-security.org/TC/SP2012/program.html · Note
• http://securityfocus.com/archive/1/522005 · Note
• http://osvdb.org/80396 · Note
• http://osvdb.org/80407 · Note
• http://osvdb.org/80393 · Note
• http://osvdb.org/80395 · Note