CVE-2012-1433: Undefined Security Weakness

The Microsoft EXE file parser in AhnLab V3 Internet Security 2011.01.18.00, Emsisoft Anti-Malware 5.1.0.1, eSafe 7.0.17.0, Ikarus Virus Utilities T3 Command Line Scanner 1.1.97.0, and Panda Antivirus 10.0.2.7 allows remote attackers to bypass malware detection via an EXE file with a \4a\46\49\46...

CVE-2012-1435: Undefined Security Weakness

The Microsoft EXE file parser in AhnLab V3 Internet Security 2011.01.18.00, Emsisoft Anti-Malware 5.1.0.1, eSafe 7.0.17.0, Ikarus Virus Utilities T3 Command Line Scanner 1.1.97.0, and Panda Antivirus 10.0.2.7 allows remote attackers to bypass malware detection via an EXE file with a...

CVE-2012-1444: Undefined Security Weakness

The ELF file parser in eSafe 7.0.17.0, Prevx 3.0, Fortinet Antivirus 4.2.254.0, and Panda Antivirus 10.0.2.7 allows remote attackers to bypass malware detection via an ELF file with a modified abiversion field. NOTE: this may later be SPLIT into multiple CVEs if additional information is publishe...

CVE-2012-1448: Undefined Security Weakness

The CAB file parser in Quick Heal aka Cat QuickHeal 11.00, Trend Micro AntiVirus 9.120.0.1004, Ikarus Virus Utilities T3 Command Line Scanner 1.1.97.0, Trend Micro HouseCall 9.120.0.1004, and Emsisoft Anti-Malware 5.1.0.1 allows remote attackers to bypass malware detection via a CAB file with a...

CVE-2012-1455: Undefined Security Weakness

The CAB file parser in NOD32 Antivirus 5795 and Rising Antivirus 22.83.00.03 allows remote attackers to bypass malware detection via a CAB file with a modified vMinor version field. NOTE: this may later be SPLIT into multiple CVEs if additional information is published showing that the error...

PT-2012-3287

Name of the Vulnerable Software and Affected Versions AhnLab V3 Internet Security version 2011.01.18.00 AVG Anti-Virus version 10.0.0.1190 Quick Heal version 11.00 Emsisoft Anti-Malware version 5.1.0.1 eSafe version 7.0.17.0 Fortinet Antivirus version 4.2.254.0 Ikarus Virus Utilities T3 Command...

PT-2012-3277

Name of the Vulnerable Software and Affected Versions Emsisoft Anti-Malware version 5.1.0.1 Ikarus Virus Utilities T3 Command Line Scanner version 1.1.97.0 Quick Heal version 11.00 Description The issue allows remote attackers to bypass malware detection. This is achieved via a CAB file with a...

PT-2012-3285

Name of the Vulnerable Software and Affected Versions Antiy Labs AVL SDK version 2.0.3.7 Quick Heal version 11.00 Command Antivirus version 5.2.11.5 eSafe version 7.0.17.0 F-Prot Antivirus version 4.6.2.117 Jiangmin Antivirus version 13.0.900 K7 AntiVirus version 9.77.3565 VBA32 version 3.12.14.2...

PT-2012-3254

Name of the Vulnerable Software and Affected Versions Bitdefender version 7.2 Comodo Antivirus version 7424 Emsisoft Anti-Malware version 5.1.0.1 eSafe version 7.0.17.0 F-Secure Anti-Virus version 9.0.16160.0 Ikarus Virus Utilities T3 Command Line Scanner version 1.1.97.0 McAfee Anti-Virus Scanni...

PT-2012-3273

Name of the Vulnerable Software and Affected Versions Quick Heal versions 11.00 Trend Micro AntiVirus version 9.120.0.1004 Ikarus Virus Utilities T3 Command Line Scanner version 1.1.97.0 Trend Micro HouseCall version 9.120.0.1004 Emsisoft Anti-Malware version 5.1.0.1 Description The issue allows...

PT-2012-6306

Name of the Vulnerable Software and Affected Versions AhnLab V3 Internet Security version 2011.01.18.00 Bitdefender version 7.2 Quick Heal version 11.00 Command Antivirus version 5.2.11.5 Comodo Antivirus version 7424 eSafe version 7.0.17.0 F-Prot Antivirus version 4.6.2.117 F-Secure Anti-Virus...

PT-2012-3250

Name of the Vulnerable Software and Affected Versions Avira AntiVir version 7.11.1.163 Antiy Labs AVL SDK version 2.0.3.7 Quick Heal version 11.00 Emsisoft Anti-Malware version 5.1.0.1 Fortinet Antivirus version 4.2.254.0 Ikarus Virus Utilities T3 Command Line Scanner version 1.1.97.0 Jiangmin...

CVE-2012-1458

The Microsoft CHM file parser in ClamAV 0.96.4 and Sophos Anti-Virus 4.61.0 allows remote attackers to bypass malware detection via a crafted reset interval in the LZXC header of a CHM file. NOTE: this may later be SPLIT into multiple CVEs if additional information is published showing that the...

CVE-2012-1459

The TAR file parser in AhnLab V3 Internet Security 2011.01.18.00, Avira AntiVir 7.11.1.163, Antiy Labs AVL SDK 2.0.3.7, avast! Antivirus 4.8.1351.0 and 5.0.677.0, AVG Anti-Virus 10.0.0.1190, Bitdefender 7.2, Quick Heal aka Cat QuickHeal 11.00, ClamAV 0.96.4, Command Antivirus 5.2.11.5, Comodo...

PT-2012-3284

Name of the Vulnerable Software and Affected Versions AhnLab V3 Internet Security version 2011.01.18.00 Avira AntiVir version 7.11.1.163 Antiy Labs AVL SDK version 2.0.3.7 avast! Antivirus versions 4.8.1351.0 through 5.0.677.0 AVG Anti-Virus version 10.0.0.1190 Bitdefender version 7.2 Quick Heal...

PT-2012-3267

Name of the Vulnerable Software and Affected Versions Quick Heal versions 11.00 McAfee Anti-Virus Scanning Engine version 5.400.0.1158 McAfee Gateway version 2010.1C eSafe version 7.0.17.0 Kaspersky Anti-Virus version 7.0.0.125 F-Secure Anti-Virus version 9.0.16160.0 Sophos Anti-Virus version...

SuSE 10 Security Update : wireshark (ZYPP Patch Number 7943)

This version upgrade of wireshark to 1.4.11 fixes the following security issues : - RLC dissector buffer overflow. CVE-2012-0043 - multiple file parser vulnerabilities. CVE-2012-0041 - NULL pointer vulnerabilities. CVE-2012-0042 - DoS due to too large buffer alloc request. CVE-2012-0066 - DoS due...

SuSE 11.1 Security Update : wireshark (SAT Patch Number 5741)

This version upgrade of wireshark to 1.4.11 fixes the following security issues : - RLC dissector buffer overflow. CVE-2012-0043 - multiple file parser vulnerabilities. CVE-2012-0041 - NULL pointer vulnerabilities. CVE-2012-0042 - DoS due to too large buffer alloc request. CVE-2012-0066 - DoS due...

SuSE 11.1 Security Update : wireshark (SAT Patch Number 5281)

This update of wireshark fixes the following vulnerabilities : - Wireshark IKE dissector vulnerability. CVE-2011-3266 - Wireshark Lua script execution vulnerability. CVE-2011-3360 - Wireshark buffer exception handling vulnerability. CVE-2011-3483 - Lucent/Ascend file parser susceptible to infinit...

Oracle Outside In CorelDRAW File Parser Integer Overflow (CVE-2011-2264; CVE-2011-3541)

An integer overflow vulnerability has been reported in Oracle Outside-In. The vulnerability is due to improper bounds checking of user-supplied values while parsing malicious CorelDRAW cdr files. A remote attacker may exploit this vulnerability by sending a malicious CDR file to a target user...