Lucene search

[email protected]CVE-2012-1454

HistoryMar 21, 2012 - 10:11 a.m.

CVE-2012-1454

2012-03-2110:11:49

CWE-264

[email protected]

web.nvd.nist.gov

cve-2012-1454

elf file

dr.web

esafe

mcafee gateway

rising antivirus

fortinet antivirus

panda antivirus

remote code execution

malware detection

4.3 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

6.7 Medium

AI Score

Confidence

Low

0.974 High

EPSS

Percentile

99.9%

JSON

The ELF file parser in Dr.Web 5.0.2.03300, eSafe 7.0.17.0, McAfee Gateway (formerly Webwasher) 2010.1C, Rising Antivirus 22.83.00.03, Fortinet Antivirus 4.2.254.0, and Panda Antivirus 10.0.2.7 allows remote attackers to bypass malware detection via an ELF file with a modified ei_version field. NOTE: this may later be SPLIT into multiple CVEs if additional information is published showing that the error occurred independently in different ELF parser implementations.

Affected configurations

NVD

Node

aladdinesafeMatch7.0.17.0

drwebdr.web_antivirusMatch5.0.2.03300

fortinetfortinet_antivirusMatch4.2.254.0

mcafeegatewayMatch2010.1c

pandasecuritypanda_antivirusMatch10.0.2.7

rising-globalrising_antivirusMatch22.83.00.03

CPENameOperatorVersion
aladdin:esafealaddin esafeeq7.0.17.0
drweb:dr.web_antivirusdrweb dr.web antiviruseq5.0.2.03300
fortinet:fortinet_antivirusfortinet fortinet antiviruseq4.2.254.0
mcafee:gatewaymcafee gatewayeq2010.1c
pandasecurity:panda_antiviruspandasecurity panda antiviruseq10.0.2.7
rising-global:rising_antivirusrising-global rising antiviruseq22.83.00.03

CPE	Name	Operator	Version
aladdin:esafe	aladdin esafe	eq	7.0.17.0
drweb:dr.web_antivirus	drweb dr.web antivirus	eq	5.0.2.03300
fortinet:fortinet_antivirus	fortinet fortinet antivirus	eq	4.2.254.0
mcafee:gateway	mcafee gateway	eq	2010.1c
pandasecurity:panda_antivirus	pandasecurity panda antivirus	eq	10.0.2.7
rising-global:rising_antivirus	rising-global rising antivirus	eq	22.83.00.03

References

osvdb.org/80432

www.ieee-security.org/TC/SP2012/program.html

www.securityfocus.com/archive/1/522005

4.3 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

6.7 Medium

AI Score

Confidence

Low

0.974 High

EPSS

Percentile

99.9%

JSON

Related for CVE-2012-1454

prion1 cvelist1 nvd1