CVE-2012-1452

CVE-2012-1452 affects the CAB file parser in Emsisoft Anti-Malware 5.1.0.1, Ikarus Virus Utilities T3 Command Line Scanner 1.1.97.0, and Quick Heal (Cat QuickHeal) 11.00. It allows remote attackers to bypass malware detection by delivering a CAB file with a modified reserved1 field. The descripti...

CVE-2012-1459

CVE-2012-1459 affects multiple antivirus products including ClamAV. The issue is a vulnerability in the TAR file parser where a TAR archive entry length field could correspond to the entire entry plus part of the header of the next entry, allowing remote attackers to bypass malware detection. The...

CVE-2012-1458

The Microsoft CHM file parser in ClamAV 0.96.4 and Sophos Anti-Virus 4.61.0 allows remote attackers to bypass malware detection via a crafted reset interval in the LZXC header of a CHM file. NOTE: this may later be SPLIT into multiple CVEs if additional information is published showing that the...

CVE-2012-1458

The CVE-2012-1458 issue affects the CHM file parser in ClamAV (v0.96.4) and Sophos Anti-Virus (v4.61.0), allowing remote bypass of malware detection via a crafted reset interval in the CHM file’s LZXC header. Publicly linked advisories and OpenVAS/Nessus entries confirm this as a vulnerability ti...

CVE-2012-1459

The TAR file parser in AhnLab V3 Internet Security 2011.01.18.00, Avira AntiVir 7.11.1.163, Antiy Labs AVL SDK 2.0.3.7, avast! Antivirus 4.8.1351.0 and 5.0.677.0, AVG Anti-Virus 10.0.0.1190, Bitdefender 7.2, Quick Heal aka Cat QuickHeal 11.00, ClamAV 0.96.4, Command Antivirus 5.2.11.5, Comodo...

PT-2012-3262

Name of the Vulnerable Software and Affected Versions Comodo Antivirus version 7425 Description The issue concerns a bypass of malware detection in the Microsoft Office file parser. It can be exploited by remote attackers using a specifically crafted Office file that contains a x50x4Bx53x70x58...

CVE-2012-1437: Undefined Security Weakness

The Microsoft Office file parser in Comodo Antivirus 7425 allows remote attackers to bypass malware detection via an Office file with a \50\4B\53\70\58 character sequence at a certain location...

CVE-2012-1451: Undefined Security Weakness

The CAB file parser in Emsisoft Anti-Malware 5.1.0.1 and Ikarus Virus Utilities T3 Command Line Scanner 1.1.97.0 allows remote attackers to bypass malware detection via a CAB file with a modified reserved2 field. NOTE: this may later be SPLIT into multiple CVEs if additional information is...

CVE-2012-1455: Undefined Security Weakness

The CAB file parser in NOD32 Antivirus 5795 and Rising Antivirus 22.83.00.03 allows remote attackers to bypass malware detection via a CAB file with a modified vMinor version field. NOTE: this may later be SPLIT into multiple CVEs if additional information is published showing that the error...

CVE-2012-1430: Undefined Security Weakness

The ELF file parser in Bitdefender 7.2, Comodo Antivirus 7424, eSafe 7.0.17.0, F-Secure Anti-Virus 9.0.16160.0, McAfee Anti-Virus Scanning Engine 5.400.0.1158, McAfee Gateway formerly Webwasher 2010.1C, nProtect Anti-Virus 2011-01-17.01, Sophos Anti-Virus 4.61.0, and Rising Antivirus 22.83.00.03...

PT-2012-6305

Name of the Vulnerable Software and Affected Versions AVG Anti-Virus version 10.0.0.1190 Bitdefender version 7.2 Command Antivirus version 5.2.11.5 Emsisoft Anti-Malware version 5.1.0.1 F-Secure Anti-Virus version 9.0.16160.0 Fortinet Antivirus version 4.2.254.0 Ikarus Virus Utilities T3 Command...

CVE-2012-1433: Undefined Security Weakness

The Microsoft EXE file parser in AhnLab V3 Internet Security 2011.01.18.00, Emsisoft Anti-Malware 5.1.0.1, eSafe 7.0.17.0, Ikarus Virus Utilities T3 Command Line Scanner 1.1.97.0, and Panda Antivirus 10.0.2.7 allows remote attackers to bypass malware detection via an EXE file with a \4a\46\49\46...

PT-2012-3258

Name of the Vulnerable Software and Affected Versions AhnLab V3 Internet Security version 2011.01.18.00 Emsisoft Anti-Malware version 5.1.0.1 eSafe version 7.0.17.0 Ikarus Virus Utilities T3 Command Line Scanner version 1.1.97.0 Panda Antivirus version 10.0.2.7 Description The issue allows remote...

CVE-2012-1457

The TAR file parser in Avira AntiVir 7.11.1.163, Antiy Labs AVL SDK 2.0.3.7, avast! Antivirus 4.8.1351.0 and 5.0.677.0, AVG Anti-Virus 10.0.0.1190, Bitdefender 7.2, Quick Heal aka Cat QuickHeal 11.00, ClamAV 0.96.4, Command Antivirus 5.2.11.5, Emsisoft Anti-Malware 5.1.0.1, eSafe 7.0.17.0, F-Prot...

PT-2012-3274

Name of the Vulnerable Software and Affected Versions NOD32 Antivirus version 5795 Rising Antivirus version 22.83.00.03 Description The issue allows remote attackers to bypass malware detection. This is achieved by using a CAB file with a modified vMajor field. Recommendations For NOD32 Antivirus...

PT-2012-3246

Name of the Vulnerable Software and Affected Versions Quick Heal versions 11.00 Norman Antivirus version 6.06.12 Rising Antivirus version 22.83.00.03 Symantec Endpoint Protection version 11 Description The issue concerns a TAR file parser that allows remote attackers to bypass malware detection...

CVE-2012-1441: Undefined Security Weakness

The Microsoft EXE file parser in eSafe 7.0.17.0 and Prevx 3.0 allows remote attackers to bypass malware detection via an EXE file with a modified value in any of several e fields. NOTE: this may later be SPLIT into multiple CVEs if additional information is published showing that the error occurr...

CVE-2012-1422: Undefined Security Weakness

The TAR file parser in Quick Heal aka Cat QuickHeal 11.00, NOD32 Antivirus 5795, Norman Antivirus 6.06.12, and Rising Antivirus 22.83.00.03 allows remote attackers to bypass malware detection via a POSIX TAR file with an initial ITSF character sequence. NOTE: this may later be SPLIT into multiple...

CVE-2012-1431: Undefined Security Weakness

The ELF file parser in Bitdefender 7.2, Command Antivirus 5.2.11.5, Comodo Antivirus 7424, eSafe 7.0.17.0, F-Prot Antivirus 4.6.2.117, F-Secure Anti-Virus 9.0.16160.0, McAfee Gateway formerly Webwasher 2010.1C, nProtect Anti-Virus 2011-01-17.01, Sophos Anti-Virus 4.61.0, and Rising Antivirus...

PT-2012-3272

Name of the Vulnerable Software and Affected Versions Fortinet Antivirus version 4.2.254.0 eSafe version 7.0.17.0 Dr.Web version 5.0.2.03300 Panda Antivirus version 10.0.2.7 Description The issue allows remote attackers to bypass malware detection by utilizing an ELF file with a modified e versio...