CVEvulnerability
CVE-2012-1429
4.3 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2012-03-21
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 4.3 MEDIUM — AV:N/AC:M/Au:N/C:N/I:P/A:N
- Weaknesses
- CWE-264
Description
The ELF file parser in Bitdefender 7.2, Comodo Antivirus 7424, Emsisoft Anti-Malware 5.1.0.1, eSafe 7.0.17.0, F-Secure Anti-Virus 9.0.16160.0, Ikarus Virus Utilities T3 Command Line Scanner 1.1.97.0, McAfee Anti-Virus Scanning Engine 5.400.0.1158, McAfee Gateway (formerly Webwasher) 2010.1C, and nProtect Anti-Virus 2011-01-17.01 allows remote attackers to bypass malware detection via an ELF file with a ustar character sequence at a certain location. NOTE: this may later be SPLIT into multiple CVEs if additional information is published showing that the error occurred independently in different ELF parser implementations.
Affected configurations
• aladdin esafe 7.0.17.0
• comodo comodo antivirus 7424
• emsisoft anti-malware 5.1.0.1
• f-secure f-secure anti-virus 9.0.16160.0
• ikarus ikarus virus utilities t3 command line scanner 1.1.97.0
• mcafee gateway 2010.1c
• mcafee scan engine 5.400.0.1158
• nprotect nprotect antivirus 2011-01-17.01
• softwin bitdefender 7.2
Related
Weakness · not in database (1)
References
- http://www.ieee-security.org/TC/SP2012/program.html www.ieee-security.org
- http://www.securityfocus.com/archive/1/522005 www.securityfocus.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/74244 exchange.xforce.ibmcloud.com
- http://www.ieee-security.org/TC/SP2012/program.html www.ieee-security.org
- http://www.securityfocus.com/archive/1/522005 www.securityfocus.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/74244 exchange.xforce.ibmcloud.com