CVE-2012-1435

The CVE-2012-1435 entry describes a vulnerability in the Microsoft EXE file parser used by several antivirus products (AhnLab V3 Internet Security, Emsisoft Anti-Malware, eSafe, Ikarus, Panda Antivirus). The vulnerability allows remote attackers to bypass malware detection when processing an EXE ...

CVE-2012-1444

The ELF file parser in eSafe 7.0.17.0, Prevx 3.0, Fortinet Antivirus 4.2.254.0, and Panda Antivirus 10.0.2.7 allows remote attackers to bypass malware detection via an ELF file with a modified abiversion field. NOTE: this may later be SPLIT into multiple CVEs if additional information is publishe...

CVE-2012-1446

The CVE-2012-1446 entry describes a vulnerability in multiple antivirus/ELF parsers where an ELF file with a modified encoding field can bypass malware detection. Affected products include Quick Heal (Cat QuickHeal) 11.00, McAfee Anti-Virus Scanning Engine 5.400.0.1158, Symantec Endpoint Protecti...

CVE-2012-1452

The CAB file parser in Emsisoft Anti-Malware 5.1.0.1, Ikarus Virus Utilities T3 Command Line Scanner 1.1.97.0, and Quick Heal aka Cat QuickHeal 11.00 allows remote attackers to bypass malware detection via a CAB file with a modified reserved1 field. NOTE: this may later be SPLIT into multiple CVE...

CVE-2012-1447

The ELF file parser in Fortinet Antivirus 4.2.254.0, eSafe 7.0.17.0, Dr.Web 5.0.2.03300, and Panda Antivirus 10.0.2.7 allows remote attackers to bypass malware detection via an ELF file with a modified eversion field. NOTE: this may later be SPLIT into multiple CVEs if additional information is...

PT-2012-3245

Name of the Vulnerable Software and Affected Versions Quick Heal versions 11.00 Command Antivirus version 5.2.11.5 F-Prot Antivirus version 4.6.2.117 Fortinet Antivirus version 4.2.254.0 K7 AntiVirus version 9.77.3565 Kaspersky Anti-Virus version 7.0.0.125 Microsoft Security Essentials version 2....

PT-2012-3262

Name of the Vulnerable Software and Affected Versions Comodo Antivirus version 7425 Description The issue concerns a bypass of malware detection in the Microsoft Office file parser. It can be exploited by remote attackers using a specifically crafted Office file that contains a x50x4Bx53x70x58...

PT-2012-3252

Name of the Vulnerable Software and Affected Versions Quick Heal versions 11.00 Norman Antivirus version 6.06.12 Sophos Anti-Virus version 4.61.0 Description The issue allows remote attackers to bypass malware detection. This is achieved through a POSIX TAR file containing a specific character...

CVE-2012-1437: Undefined Security Weakness

The Microsoft Office file parser in Comodo Antivirus 7425 allows remote attackers to bypass malware detection via an Office file with a \50\4B\53\70\58 character sequence at a certain location...

CVE-2012-1451: Undefined Security Weakness

The CAB file parser in Emsisoft Anti-Malware 5.1.0.1 and Ikarus Virus Utilities T3 Command Line Scanner 1.1.97.0 allows remote attackers to bypass malware detection via a CAB file with a modified reserved2 field. NOTE: this may later be SPLIT into multiple CVEs if additional information is...

CVE-2012-1455: Undefined Security Weakness

The CAB file parser in NOD32 Antivirus 5795 and Rising Antivirus 22.83.00.03 allows remote attackers to bypass malware detection via a CAB file with a modified vMinor version field. NOTE: this may later be SPLIT into multiple CVEs if additional information is published showing that the error...

PT-2012-3261

Name of the Vulnerable Software and Affected Versions AhnLab V3 Internet Security version 2011.01.18.00 Emsisoft Anti-Malware version 5.1.0.1 eSafe version 7.0.17.0 Ikarus Virus Utilities T3 Command Line Scanner version 1.1.97.0 Panda Antivirus version 10.0.2.7 Description The Microsoft EXE file...

CVE-2012-1430: Undefined Security Weakness

The ELF file parser in Bitdefender 7.2, Comodo Antivirus 7424, eSafe 7.0.17.0, F-Secure Anti-Virus 9.0.16160.0, McAfee Anti-Virus Scanning Engine 5.400.0.1158, McAfee Gateway formerly Webwasher 2010.1C, nProtect Anti-Virus 2011-01-17.01, Sophos Anti-Virus 4.61.0, and Rising Antivirus 22.83.00.03...

PT-2012-3248

Name of the Vulnerable Software and Affected Versions Command Antivirus version 5.2.11.5 Emsisoft Anti-Malware version 5.1.0.1 F-Prot Antivirus version 4.6.2.117 Fortinet Antivirus version 4.2.254.0 Ikarus Virus Utilities T3 Command Line Scanner version 1.1.97.0 K7 AntiVirus version 9.77.3565 NOD...

PT-2012-3271

Name of the Vulnerable Software and Affected Versions Quick Heal version 11.00 McAfee Anti-Virus Scanning Engine version 5.400.0.1158 Symantec Endpoint Protection version 11 with AVEngine version 20101.3.0.103 Norman Antivirus version 6.06.12 eSafe version 7.0.17.0 Kaspersky Anti-Virus version...

PT-2012-6305

Name of the Vulnerable Software and Affected Versions AVG Anti-Virus version 10.0.0.1190 Bitdefender version 7.2 Command Antivirus version 5.2.11.5 Emsisoft Anti-Malware version 5.1.0.1 F-Secure Anti-Virus version 9.0.16160.0 Fortinet Antivirus version 4.2.254.0 Ikarus Virus Utilities T3 Command...

PT-2012-6304

Name of the Vulnerable Software and Affected Versions AhnLab V3 Internet Security version 2011.01.18.00 Avira AntiVir version 7.11.1.163 Antiy Labs AVL SDK version 2.0.3.7 avast! Antivirus versions 4.8.1351.0 through 5.0.677.0 AVG Anti-Virus version 10.0.0.1190 Bitdefender version 7.2 Quick Heal...

PT-2012-3253

Name of the Vulnerable Software and Affected Versions Quick Heal versions 11.00 Norman Antivirus version 6.06.12 Sophos Anti-Virus version 4.61.0 Description The issue allows remote attackers to bypass malware detection. This is achieved through a POSIX TAR file containing a specific character...

PT-2012-3276

Name of the Vulnerable Software and Affected Versions Emsisoft Anti-Malware version 5.1.0.1 Ikarus Virus Utilities T3 Command Line Scanner version 1.1.97.0 Description The issue allows remote attackers to bypass malware detection. This is achieved through a CAB file with a modified reserved2 fiel...

PT-2012-3277

Name of the Vulnerable Software and Affected Versions Emsisoft Anti-Malware version 5.1.0.1 Ikarus Virus Utilities T3 Command Line Scanner version 1.1.97.0 Quick Heal version 11.00 Description The issue allows remote attackers to bypass malware detection. This is achieved via a CAB file with a...