Lucene search

MitreCVE-2005-3213

HistoryOct 14, 2005 - 10:02 a.m.

CVE-2005-3213

2005-10-1410:02:00

mitre

web.nvd.nist.gov

cve-2005-3213

f-prot antivirus

remote attackers

virus detection bypass

rar file

winrar

powerzip

winzip

bitzipper

CVSS2

5.1

Attack Vector

NETWORK

Attack Complexity

HIGH

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:H/Au:N/C:P/I:P/A:P

AI Score

Confidence

Low

EPSS

0.003

Percentile

69.7%

JSON

Multiple interpretation error in unspecified versions of F-Prot Antivirus allows remote attackers to bypass virus detection via a malicious executable in a specially crafted RAR file with malformed central and local headers, which can still be opened by products such as Winrar and PowerZip, even though they are rejected as corrupted by Winzip and BitZipper.

Affected configurations

Nvd

Node

frisk_softwaref-prot_antivirus

VendorProductVersionCPE
frisk_softwaref-prot_antivirus*cpe:2.3:a:frisk_software:f-prot_antivirus:*:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
frisk_software	f-prot_antivirus	*	cpe:2.3:a:frisk_software:f-prot_antivirus::::::::

References

marc.info/?l=bugtraq&m=112879611919750&w=2

shadock.net/secubox/AVCraftedArchive.html

CVSS2

5.1

Attack Vector

NETWORK

Attack Complexity

HIGH

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:H/Au:N/C:P/I:P/A:P

AI Score

Confidence

Low

EPSS

0.003

Percentile

69.7%

JSON

Related for CVE-2005-3213