CVE-2012-1449

The CVE describes a vulnerability in the CAB file parser used by NOD32 Antivirus 5795 and Rising Antivirus 22.83.00.03, where a modified vMajor field in a CAB file can cause the parser to bypass malware detection. Affected software: NOD32 Antivirus (version 5795) and Rising Antivirus (version 22....

CVE-2012-1452

The CAB file parser in Emsisoft Anti-Malware 5.1.0.1, Ikarus Virus Utilities T3 Command Line Scanner 1.1.97.0, and Quick Heal aka Cat QuickHeal 11.00 allows remote attackers to bypass malware detection via a CAB file with a modified reserved1 field. NOTE: this may later be SPLIT into multiple CVE...

CVE-2012-1432

The CVE-2012-1432 entry describes a vulnerability in the Microsoft EXE file parser used by several antivirus products (Emsisoft Anti-Malware 5.1.0.1, eSafe 7.0.17.0, Ikarus Virus Utilities T3 CLI Scanner 1.1.97.0, Panda Antivirus 10.0.2.7) where remote attackers can bypass malware detection by an...

CVE-2012-1455

The CAB file parser in NOD32 Antivirus 5795 and Rising Antivirus 22.83.00.03 allows remote attackers to bypass malware detection via a CAB file with a modified vMinor version field. NOTE: this may later be SPLIT into multiple CVEs if additional information is published showing that the error...

CVE-2012-1461

The Gzip file parser in several antivirus and security products, including AVG Anti-Virus 10.0.0.1190 , Bitdefender 7.2 , Kaspersky Anti-Virus 7.0.0.125 , and Trend Micro AntiVirus 9.120.0.1004 , is vulnerable to a detection bypass. Remote attackers can bypass malware detection by using a .tar.gz...

CVE-2012-1428

The CVE-2012-1428 entry concerns the TAR file parser in Quick Heal 11.00, Norman Antivirus 6.06.12, and Sophos Anti-Virus 4.61.0. It states that a POSIX TAR file containing the specific sequence \4a\46\49\46 at a certain location can bypass malware detection. The note indicates the issue may late...

CVE-2012-1445

The CVE-2012-1445 entry concerns the ELF file parser in eSafe 7.0.17.0, Rising Antivirus 22.83.00.03, Fortinet Antivirus 4.2.254.0, and Panda Antivirus 10.0.2.7. According to the records, remote attackers can bypass malware detection by submitting an ELF file with a modified abi field. The availa...

CVE-2012-1430

The CVE-2012-1430 entry concerns multiple antivirus products (Bitdefender 7.2, Comodo Antivirus 7424, eSafe 7.0.17.0, F-Secure 9.0.16160.0, McAfee Scan Engine 5.400.0.1158, McAfee Gateway 2010.1C, nProtect 2011-01-17.01, Sophos 4.61.0, Rising 22.83.00.03) whose ELF file parser can be bypassed by ...

CVE-2012-1426

The TAR file parser in Quick Heal aka Cat QuickHeal 11.00, Command Antivirus 5.2.11.5, F-Prot Antivirus 4.6.2.117, K7 AntiVirus 9.77.3565, Norman Antivirus 6.06.12, and Rising Antivirus 22.83.00.03 allows remote attackers to bypass malware detection via a POSIX TAR file with an initial \42\5A\68...

CVE-2012-1424

The TAR file parser in Antiy Labs AVL SDK 2.0.3.7, Quick Heal aka Cat QuickHeal 11.00, Jiangmin Antivirus 13.0.900, Norman Antivirus 6.06.12, PC Tools AntiVirus 7.0.3.5, and Sophos Anti-Virus 4.61.0 allows remote attackers to bypass malware detection via a POSIX TAR file with a \19\04\00\10...

CVE-2012-1462

CVE-2012-1462 describes a vulnerability in the ZIP file parser used by multiple antivirus products (e.g., Symantec Endpoint Protection 11, AhnLab V3 Internet Security, AVG, Quick Heal, Emsisoft Anti-Malware, Sophos, Kaspersky, Fortinet, etc.). The issue allows remote attackers to bypass malware d...

CVE-2012-1443

CVE-2012-1443 describes a bypass in the RAR file parser used by multiple antivirus products (e.g., ClamAV 0.96.4-related integrations and several vendors) where a RAR file starting with an MZ character sequence can be analyzed by user-assisted remote attackers to bypass malware detection. The evi...

CVE-2012-1445

The ELF file parser in eSafe 7.0.17.0, Rising Antivirus 22.83.00.03, Fortinet Antivirus 4.2.254.0, and Panda Antivirus 10.0.2.7 allows remote attackers to bypass malware detection via an ELF file with a modified abi field. NOTE: this may later be SPLIT into multiple CVEs if additional information...

CVE-2012-1425

The CVE-2012-1425 entry covers a flaw in the TAR file parser used by multiple antivirus products (e.g., Avira AntiVir, AVL SDK, Quick Heal, Emsisoft, Fortinet, Ikarus, Jiangmin, Kaspersky, McAfee engines, NOD32, Norman, PC Tools, Symantec Endpoint Protection, Trend Micro) where a TAR file beginni...

CVE-2012-1453

The CAB file parser in Dr.Web 5.0.2.03300, Trend Micro HouseCall 9.120.0.1004, Kaspersky Anti-Virus 7.0.0.125, Sophos Anti-Virus 4.61.0, Trend Micro AntiVirus 9.120.0.1004, McAfee Gateway formerly Webwasher 2010.1C, Emsisoft Anti-Malware 5.1.0.1, CA eTrust Vet Antivirus 36.1.8511, Antiy Labs AVL...

CVE-2012-1427

The TAR file parser in Quick Heal aka Cat QuickHeal 11.00, Norman Antivirus 6.06.12, and Sophos Anti-Virus 4.61.0 allows remote attackers to bypass malware detection via a POSIX TAR file with a \57\69\6E\5A\69\70 character sequence at a certain location. NOTE: this may later be SPLIT into multipl...

CVE-2012-1424

The CVE-2012-1424 entry relates to a vulnerability in the TAR file parser used by multiple products: Antiy Labs AVL SDK 2.0.3.7, Quick Heal (Cat QuickHeal) 11.00, Jiangmin Antivirus 13.0.900, Norman Antivirus 6.06.12, PC Tools AntiVirus 7.0.3.5, and Sophos Anti-Virus 4.61.0. The issue allows remo...

CVE-2012-1428

The TAR file parser in Quick Heal aka Cat QuickHeal 11.00, Norman Antivirus 6.06.12, and Sophos Anti-Virus 4.61.0 allows remote attackers to bypass malware detection via a POSIX TAR file with a \4a\46\49\46 character sequence at a certain location. NOTE: this may later be SPLIT into multiple CVEs...

CVE-2012-1440

The CVE affects the ELF file parser in Norman Antivirus 6.06.12, eSafe 7.0.17.0, CA eTrust Vet Antivirus 36.1.8511, Fortinet Antivirus 4.2.254.0, and Panda Antivirus 10.0.2.7. A modified identsize field in ELF files allows remote attackers to bypass malware detection, per the description. This do...

CVE-2012-1436

The Microsoft EXE file parser in AhnLab V3 Internet Security 2011.01.18.00, Emsisoft Anti-Malware 5.1.0.1, eSafe 7.0.17.0, Ikarus Virus Utilities T3 Command Line Scanner 1.1.97.0, and Panda Antivirus 10.0.2.7 allows remote attackers to bypass malware detection via an EXE file with a \2D\6C\68...