Lucene search

[email protected]NVD:CVE-2012-1431

HistoryMar 21, 2012 - 10:11 a.m.

CVE-2012-1431

2012-03-2110:11:47

CWE-264

[email protected]

web.nvd.nist.gov

CVSS2

4.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

AI Score

6.5

Confidence

Low

EPSS

0.975

Percentile

100.0%

JSON

The ELF file parser in Bitdefender 7.2, Command Antivirus 5.2.11.5, Comodo Antivirus 7424, eSafe 7.0.17.0, F-Prot Antivirus 4.6.2.117, F-Secure Anti-Virus 9.0.16160.0, McAfee Gateway (formerly Webwasher) 2010.1C, nProtect Anti-Virus 2011-01-17.01, Sophos Anti-Virus 4.61.0, and Rising Antivirus 22.83.00.03 allows remote attackers to bypass malware detection via an ELF file with a \4a\46\49\46 character sequence at a certain location. NOTE: this may later be SPLIT into multiple CVEs if additional information is published showing that the error occurred independently in different ELF parser implementations.

Affected configurations

Nvd

Node

aladdinesafeMatch7.0.17.0

authentiumcommand_antivirusMatch5.2.11.5

bitdefenderbitdefenderMatch7.2

comodocomodo_antivirusMatch7424

f-protf-prot_antivirusMatch4.6.2.117

f-securef-secure_anti-virusMatch9.0.16160.0

mcafeegatewayMatch2010.1c

nprotectnprotect_antivirusMatch2011-01-17.01

rising-globalrising_antivirusMatch22.83.00.03

sophossophos_anti-virusMatch4.61.0

VendorProductVersionCPE
aladdinesafe7.0.17.0cpe:2.3:a:aladdin:esafe:7.0.17.0:*:*:*:*:*:*:*
authentiumcommand_antivirus5.2.11.5cpe:2.3:a:authentium:command_antivirus:5.2.11.5:*:*:*:*:*:*:*
bitdefenderbitdefender7.2cpe:2.3:a:bitdefender:bitdefender:7.2:*:*:*:*:*:*:*
comodocomodo_antivirus7424cpe:2.3:a:comodo:comodo_antivirus:7424:*:*:*:*:*:*:*
f-protf-prot_antivirus4.6.2.117cpe:2.3:a:f-prot:f-prot_antivirus:4.6.2.117:*:*:*:*:*:*:*
f-securef-secure_anti-virus9.0.16160.0cpe:2.3:a:f-secure:f-secure_anti-virus:9.0.16160.0:*:*:*:*:*:*:*
mcafeegateway2010.1ccpe:2.3:a:mcafee:gateway:2010.1c:*:*:*:*:*:*:*
nprotectnprotect_antivirus2011-01-17.01cpe:2.3:a:nprotect:nprotect_antivirus:2011-01-17.01:*:*:*:*:*:*:*
rising-globalrising_antivirus22.83.00.03cpe:2.3:a:rising-global:rising_antivirus:22.83.00.03:*:*:*:*:*:*:*
sophossophos_anti-virus4.61.0cpe:2.3:a:sophos:sophos_anti-virus:4.61.0:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
aladdin	esafe	7.0.17.0	cpe:2.3:a:aladdin:esafe:7.0.17.0:::::::*
authentium	command_antivirus	5.2.11.5	cpe:2.3:a:authentium:command_antivirus:5.2.11.5:::::::*
bitdefender	bitdefender	7.2	cpe:2.3:a:bitdefender:bitdefender:7.2:::::::*
comodo	comodo_antivirus	7424	cpe:2.3:a:comodo:comodo_antivirus:7424:::::::*
f-prot	f-prot_antivirus	4.6.2.117	cpe:2.3:a:f-prot:f-prot_antivirus:4.6.2.117:::::::*
f-secure	f-secure_anti-virus	9.0.16160.0	cpe:2.3:a:f-secure:f-secure_anti-virus:9.0.16160.0:::::::*
mcafee	gateway	2010.1c	cpe:2.3:a:mcafee:gateway:2010.1c:::::::*
nprotect	nprotect_antivirus	2011-01-17.01	cpe:2.3:a:nprotect:nprotect_antivirus:2011-01-17.01:::::::*
rising-global	rising_antivirus	22.83.00.03	cpe:2.3:a:rising-global:rising_antivirus:22.83.00.03:::::::*
sophos	sophos_anti-virus	4.61.0	cpe:2.3:a:sophos:sophos_anti-virus:4.61.0:::::::*

References

www.ieee-security.org/TC/SP2012/program.html

www.securityfocus.com/archive/1/522005

CVSS2

4.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

AI Score

6.5

Confidence

Low

EPSS

0.975

Percentile

100.0%

JSON

Related for NVD:CVE-2012-1431

prion1 cve1 cvelist1