Lucene search

K
cve[email protected]CVE-2012-1433
HistoryOct 03, 2022 - 4:15 p.m.

CVE-2012-1433

2022-10-0316:15:26
CWE-264
web.nvd.nist.gov
26
cve-2012-1433
microsoft
exe parser
vulnerability
antivirus
software
malware detection
bypass

6.7 Medium

AI Score

Confidence

Low

4.3 Medium

CVSS2

Access Vector

Access Complexity

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

0.972 High

EPSS

Percentile

99.8%

The Microsoft EXE file parser in AhnLab V3 Internet Security 2011.01.18.00, Emsisoft Anti-Malware 5.1.0.1, eSafe 7.0.17.0, Ikarus Virus Utilities T3 Command Line Scanner 1.1.97.0, and Panda Antivirus 10.0.2.7 allows remote attackers to bypass malware detection via an EXE file with a \4a\46\49\46 character sequence at a certain location. NOTE: this may later be SPLIT into multiple CVEs if additional information is published showing that the error occurred independently in different EXE parser implementations.

Affected configurations

NVD
Node
ahnlabv3_internet_securityMatch2011.01.18.00
OR
aladdinesafeMatch7.0.17.0
OR
emsisoftanti-malwareMatch5.1.0.1
OR
ikarusikarus_virus_utilities_t3_command_line_scannerMatch1.1.97.0
OR
pandasecuritypanda_antivirusMatch10.0.2.7

6.7 Medium

AI Score

Confidence

Low

4.3 Medium

CVSS2

Access Vector

Access Complexity

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

0.972 High

EPSS

Percentile

99.8%

Related for CVE-2012-1433