CVE-2012-1458

The CVE-2012-1458 issue affects the CHM file parser in ClamAV (v0.96.4) and Sophos Anti-Virus (v4.61.0), allowing remote bypass of malware detection via a crafted reset interval in the CHM file’s LZXC header. Publicly linked advisories and OpenVAS/Nessus entries confirm this as a vulnerability ti...

CVE-2012-1419

The TAR file parser in ClamAV 0.96.4 and Quick Heal aka Cat QuickHeal 11.00 allows remote attackers to bypass malware detection via a POSIX TAR file with an initial aliases character sequence. NOTE: this may later be SPLIT into multiple CVEs if additional information is published showing that the...

CVE-2012-1459

The TAR file parser in AhnLab V3 Internet Security 2011.01.18.00, Avira AntiVir 7.11.1.163, Antiy Labs AVL SDK 2.0.3.7, avast! Antivirus 4.8.1351.0 and 5.0.677.0, AVG Anti-Virus 10.0.0.1190, Bitdefender 7.2, Quick Heal aka Cat QuickHeal 11.00, ClamAV 0.96.4, Command Antivirus 5.2.11.5, Comodo...

CVE-2012-1458

The Microsoft CHM file parser in ClamAV 0.96.4 and Sophos Anti-Virus 4.61.0 allows remote attackers to bypass malware detection via a crafted reset interval in the LZXC header of a CHM file. NOTE: this may later be SPLIT into multiple CVEs if additional information is published showing that the...

CVE-2012-1437

CVE-2012-1437 affects the Microsoft Office file parser in Comodo Antivirus 7425. A crafted Office file containing the byte sequence \50\4B\53\70\58 at a specific location can bypass malware detection, as described in connected records. The vulnerability is tied to the Office file parsing logic us...

PT-2012-6303

Name of the Vulnerable Software and Affected Versions Avira AntiVir version 7.11.1.163 Antiy Labs AVL SDK version 2.0.3.7 avast! Antivirus versions 4.8.1351.0 through 5.0.677.0 AVG Anti-Virus version 10.0.0.1190 Bitdefender version 7.2 Quick Heal version 11.00 ClamAV version 0.96.4 Command...

PT-2012-3245

Name of the Vulnerable Software and Affected Versions Quick Heal versions 11.00 Command Antivirus version 5.2.11.5 F-Prot Antivirus version 4.6.2.117 Fortinet Antivirus version 4.2.254.0 K7 AntiVirus version 9.77.3565 Kaspersky Anti-Virus version 7.0.0.125 Microsoft Security Essentials version 2....

PT-2012-6302

Name of the Vulnerable Software and Affected Versions ClamAV version 0.96.4 Rising Antivirus version 22.83.00.03 Quick Heal version 11.00 G Data AntiVirus version 21 AVEngine version 20101.3.0.103 in Symantec Endpoint Protection 11 Command Antivirus version 5.2.11.5 Ikarus Virus Utilities T3...

PT-2012-3262

Name of the Vulnerable Software and Affected Versions Comodo Antivirus version 7425 Description The issue concerns a bypass of malware detection in the Microsoft Office file parser. It can be exploited by remote attackers using a specifically crafted Office file that contains a x50x4Bx53x70x58...

PT-2012-3252

Name of the Vulnerable Software and Affected Versions Quick Heal versions 11.00 Norman Antivirus version 6.06.12 Sophos Anti-Virus version 4.61.0 Description The issue allows remote attackers to bypass malware detection. This is achieved through a POSIX TAR file containing a specific character...

CVE-2012-1437: Undefined Security Weakness

The Microsoft Office file parser in Comodo Antivirus 7425 allows remote attackers to bypass malware detection via an Office file with a \50\4B\53\70\58 character sequence at a certain location...

CVE-2012-1451: Undefined Security Weakness

The CAB file parser in Emsisoft Anti-Malware 5.1.0.1 and Ikarus Virus Utilities T3 Command Line Scanner 1.1.97.0 allows remote attackers to bypass malware detection via a CAB file with a modified reserved2 field. NOTE: this may later be SPLIT into multiple CVEs if additional information is...

CVE-2012-1455: Undefined Security Weakness

The CAB file parser in NOD32 Antivirus 5795 and Rising Antivirus 22.83.00.03 allows remote attackers to bypass malware detection via a CAB file with a modified vMinor version field. NOTE: this may later be SPLIT into multiple CVEs if additional information is published showing that the error...

PT-2012-3261

Name of the Vulnerable Software and Affected Versions AhnLab V3 Internet Security version 2011.01.18.00 Emsisoft Anti-Malware version 5.1.0.1 eSafe version 7.0.17.0 Ikarus Virus Utilities T3 Command Line Scanner version 1.1.97.0 Panda Antivirus version 10.0.2.7 Description The Microsoft EXE file...

CVE-2012-1430: Undefined Security Weakness

The ELF file parser in Bitdefender 7.2, Comodo Antivirus 7424, eSafe 7.0.17.0, F-Secure Anti-Virus 9.0.16160.0, McAfee Anti-Virus Scanning Engine 5.400.0.1158, McAfee Gateway formerly Webwasher 2010.1C, nProtect Anti-Virus 2011-01-17.01, Sophos Anti-Virus 4.61.0, and Rising Antivirus 22.83.00.03...

PT-2012-3248

Name of the Vulnerable Software and Affected Versions Command Antivirus version 5.2.11.5 Emsisoft Anti-Malware version 5.1.0.1 F-Prot Antivirus version 4.6.2.117 Fortinet Antivirus version 4.2.254.0 Ikarus Virus Utilities T3 Command Line Scanner version 1.1.97.0 K7 AntiVirus version 9.77.3565 NOD...

PT-2012-3271

Name of the Vulnerable Software and Affected Versions Quick Heal version 11.00 McAfee Anti-Virus Scanning Engine version 5.400.0.1158 Symantec Endpoint Protection version 11 with AVEngine version 20101.3.0.103 Norman Antivirus version 6.06.12 eSafe version 7.0.17.0 Kaspersky Anti-Virus version...

PT-2012-3264

Name of the Vulnerable Software and Affected Versions eSafe version 7.0.17.0 Rising Antivirus version 22.83.00.03 Fortinet Antivirus version 4.2.254.0 Panda Antivirus version 10.0.2.7 Description The issue allows remote attackers to bypass malware detection. This is achieved through an ELF file...

PT-2012-6305

Name of the Vulnerable Software and Affected Versions AVG Anti-Virus version 10.0.0.1190 Bitdefender version 7.2 Command Antivirus version 5.2.11.5 Emsisoft Anti-Malware version 5.1.0.1 F-Secure Anti-Virus version 9.0.16160.0 Fortinet Antivirus version 4.2.254.0 Ikarus Virus Utilities T3 Command...

PT-2012-3259

Name of the Vulnerable Software and Affected Versions AhnLab V3 Internet Security version 2011.01.18.00 Emsisoft Anti-Malware version 5.1.0.1 Ikarus Virus Utilities T3 Command Line Scanner version 1.1.97.0 Panda Antivirus version 10.0.2.7 Description The issue allows remote attackers to bypass...