CVEvulnerability
CVE-2012-1442
4.3 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2012-03-21
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 4.3 MEDIUM — AV:N/AC:M/Au:N/C:N/I:P/A:N
- Weaknesses
- CWE-264
Description
The ELF file parser in Quick Heal (aka Cat QuickHeal) 11.00, McAfee Anti-Virus Scanning Engine 5.400.0.1158, McAfee Gateway (formerly Webwasher) 2010.1C, eSafe 7.0.17.0, Kaspersky Anti-Virus 7.0.0.125, F-Secure Anti-Virus 9.0.16160.0, Sophos Anti-Virus 4.61.0, Antiy Labs AVL SDK 2.0.3.7, Rising Antivirus 22.83.00.03, Fortinet Antivirus 4.2.254.0, and Panda Antivirus 10.0.2.7 allows remote attackers to bypass malware detection via an ELF file with a modified class field. NOTE: this may later be SPLIT into multiple CVEs if additional information is published showing that the error occurred independently in different ELF parser implementations.
Affected configurations
• aladdin esafe 7.0.17.0
• antiy avl sdk 2.0.3.7
• cat quick heal 11.00
• f-secure f-secure anti-virus 9.0.16160.0
• fortinet fortinet antivirus 4.2.254.0
• kaspersky kaspersky anti-virus 7.0.0.125
• mcafee gateway 2010.1c
• mcafee scan engine 5.400.0.1158
• pandasecurity panda antivirus 10.0.2.7
• rising-global rising antivirus 22.83.00.03
• sophos sophos anti-virus 4.61.0
Related
Weakness · not in database (1)
References
- http://osvdb.org/80426 osvdb.org
- http://osvdb.org/80427 osvdb.org
- http://osvdb.org/80428 osvdb.org
- http://www.ieee-security.org/TC/SP2012/program.html www.ieee-security.org
- http://www.securityfocus.com/archive/1/522005 www.securityfocus.com
- http://www.securityfocus.com/bid/52598 www.securityfocus.com
- http://osvdb.org/80426 osvdb.org
- http://osvdb.org/80427 osvdb.org
- http://osvdb.org/80428 osvdb.org
- http://www.ieee-security.org/TC/SP2012/program.html www.ieee-security.org
- http://www.securityfocus.com/archive/1/522005 www.securityfocus.com
- http://www.securityfocus.com/bid/52598 www.securityfocus.com