Lucene search

[email protected]CVE-2009-1348

HistoryApr 30, 2009 - 8:30 p.m.

CVE-2009-1348

2009-04-3020:30:00

CWE-20

[email protected]

web.nvd.nist.gov

mcafee

virusscan

total protection

internet security

securityshield

av engine bypass

vulnerability

nvd

cve-2009-1348

6.7 Medium

AI Score

Confidence

Low

7.6 High

CVSS2

Access Vector

Access Complexity

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:H/Au:N/C:C/I:C/A:C

0.007 Low

EPSS

Percentile

80.8%

JSON

The AV engine before DAT 5600 in McAfee VirusScan, Total Protection, Internet Security, SecurityShield for Microsoft ISA Server, Security for Microsoft Sharepoint, Security for Email Servers, Email Gateway, and Active Virus Defense allows remote attackers to bypass virus detection via (1) an invalid Headflags field in a malformed RAR archive, (2) an invalid Packsize field in a malformed RAR archive, or (3) an invalid Filelength field in a malformed ZIP archive.

Affected configurations

NVD

Node

mcafeeactive_virus_defense

mcafeeactive_virusscan

mcafeeemail_gateway

mcafeeinternet_security_suite

mcafeeinternet_security_suiteMatch2004

mcafeeinternet_security_suiteMatch2005

mcafeeinternet_security_suiteMatch2006

mcafeeinternet_security_suiteMatch2009

mcafeesecurityshield_for_email_servers

mcafeesecurityshield_for_microsoft_isa_server

mcafeesecurityshield_for_microsoft_sharepoint

mcafeetotal_protectionMatch2009

mcafeetotal_protection_for_endpoint

mcafeevirusscan_commandline

mcafeevirusscan_enterprise

mcafeevirusscan_enterpriseMatch--linux

mcafeevirusscan_enterpriseMatch--sap

mcafeevirusscan_enterpriseMatch--storage

mcafeevirusscan_plusMatch2009

mcafeevirusscan_usb

CPENameOperatorVersion
mcafee:active_virus_defensemcafee active virus defenseeq*
mcafee:active_virusscanmcafee active virusscaneq*
mcafee:email_gatewaymcafee email gatewayeq*
mcafee:internet_security_suitemcafee internet security suiteeq*
mcafee:internet_security_suitemcafee internet security suiteeq2004
mcafee:internet_security_suitemcafee internet security suiteeq2005
mcafee:internet_security_suitemcafee internet security suiteeq2006
mcafee:internet_security_suitemcafee internet security suiteeq2009
mcafee:securityshield_for_email_serversmcafee securityshield for email serverseq*
mcafee:securityshield_for_microsoft_isa_servermcafee securityshield for microsoft isa servereq*

CPE	Name	Operator	Version
mcafee:active_virus_defense	mcafee active virus defense	eq	*
mcafee:active_virusscan	mcafee active virusscan	eq	*
mcafee:email_gateway	mcafee email gateway	eq	*
mcafee:internet_security_suite	mcafee internet security suite	eq	*
mcafee:internet_security_suite	mcafee internet security suite	eq	2004
mcafee:internet_security_suite	mcafee internet security suite	eq	2005
mcafee:internet_security_suite	mcafee internet security suite	eq	2006
mcafee:internet_security_suite	mcafee internet security suite	eq	2009
mcafee:securityshield_for_email_servers	mcafee securityshield for email servers	eq	*
mcafee:securityshield_for_microsoft_isa_server	mcafee securityshield for microsoft isa server	eq	*