Lucene search

K
cveMitreCVE-2005-3225
HistoryOct 14, 2005 - 10:02 a.m.

CVE-2005-3225

2005-10-1410:02:00
mitre
web.nvd.nist.gov
38
cve-2005-3225
antivirus
rar file
virus detection

CVSS2

5.1

Attack Vector

NETWORK

Attack Complexity

HIGH

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:H/Au:N/C:P/I:P/A:P

AI Score

7

Confidence

Low

EPSS

0.003

Percentile

68.3%

Multiple interpretation error in unspecified versions of (1) eTrust-Iris and (2) eTrust-Vet Antivirus allows remote attackers to bypass virus detection via a malicious executable in a specially crafted RAR file with malformed central and local headers, which can still be opened by products such as Winrar and PowerZip, even though they are rejected as corrupted by Winzip and BitZipper.

Affected configurations

Nvd
Node
broadcometrust_antivirus
OR
broadcometrust_antivirus_iris_engine
VendorProductVersionCPE
broadcometrust_antivirus*cpe:2.3:a:broadcom:etrust_antivirus:*:*:*:*:*:*:*:*
broadcometrust_antivirus_iris_engine*cpe:2.3:a:broadcom:etrust_antivirus_iris_engine:*:*:*:*:*:*:*:*

CVSS2

5.1

Attack Vector

NETWORK

Attack Complexity

HIGH

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:H/Au:N/C:P/I:P/A:P

AI Score

7

Confidence

Low

EPSS

0.003

Percentile

68.3%

Related for CVE-2005-3225