PT-2012-3280 · Eset+1 · Eset Nod32 Antivirus+1

Published 2012-03-21 · Updated 2017-12-06 · CVE-2012-1455

Positive Technologies (AI Summary)

CVSS v2.0

4.3

Medium

Base vector

AV:N/AC:M/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions NOD32 Antivirus version 5795 Rising Antivirus version 22.83.00.03

Description The issue allows remote attackers to bypass malware detection. This is achieved through a CAB file with a modified vMinor version field in the CAB file parser.

Recommendations For NOD32 Antivirus version 5795, update the CAB file parser to correctly handle modified vMinor version fields. For Rising Antivirus version 22.83.00.03, update the CAB file parser to correctly handle modified vMinor version fields. As a temporary workaround, consider restricting the use of CAB files until a patch is available.

Fix

Weakness Enumeration

CWE-264

Related Identifiers

CVE-2012-1455

Affected Products

Eset Nod32 Antivirus

Rising Antivirus

References · 4

• https://nvd.nist.gov/vuln/detail/CVE-2012-1455 · Security Note
• http://ieee-security.org/TC/SP2012/program.html · Note
• http://securityfocus.com/archive/1/522005 · Note
• http://securityfocus.com/bid/52607 · Note