CVE-2005-3381

Multiple interpretation error in Ukrainian National Antivirus UNA 1.83.2.16 with kernel 265 allows remote attackers to bypass virus scanning via a file such as BAT, HTML, and EML with an "MZ" magic byte sequence which is normally associated with EXE, which causes the file to be treated as a safe...

CVE-2005-3382

Multiple interpretation error in Sophos 3.91 with the 2.28.4 engine allows remote attackers to bypass virus scanning via a file such as BAT, HTML, and EML with an "MZ" magic byte sequence which is normally associated with EXE, which causes the file to be treated as a safe type that could still be...

CVE-2005-3377

The CVE-2005-3377 entry describes a vulnerability in McAfee products where a file containing BAT, HTML, or EML data with an EXE-like MZ magic byte sequence can bypass virus scanning and be treated as a safe file type while still potentially enabling execution by applications on the host. Affected...

CVE-2005-3378

CVE-2005-3378 affects Norman 5.81 with the 5.83.02 engine. A interpretation error in handling files containing an MZ (EXE) magic byte sequence causes such files (e.g., BAT, HTML, EML) to be treated as safe types, enabling a “magic byte bug” where content can still execute as dangerous code. The v...

CVE-2005-3380

Multiple interpretation error in Panda Titanium 2005 4.02.01 allows remote attackers to bypass virus scanning via a file such as BAT, HTML, and EML with an "MZ" magic byte sequence which is normally associated with EXE, which causes the file to be treated as a safe type that could still be execut...

CVE-2005-3382

The CVE-2005-3382 entry describes a flaw in Sophos 3.91 with the 2.28.4 engine where an interpretation error allows a file (e.g., BAT, HTML, EML) containing an MZ magic byte sequence to be treated as a safe type, enabling bypass of virus scanning. This is a “magic byte bug” vulnerability that cou...

CVE-2005-3374

Summary of CVE-2005-3374 (NVD/NVD-derived): A one-file interpretation bug in the antivirus product F-Prot 3.16c enables a remote attacker to bypass virus scanning by delivering a file type such as BAT, HTML, or EML that carries an “MZ” (EXE) magic byte sequence. This causes the scanner or applica...

CVE-2005-3370

The CVE-2005-3370 entry concerns ArcaVir 2005 package (vulnerable as of 2005-06-21). It describes a body of code that mishandles file type interpretation when encountering a file containing an MZ magic byte sequence in content such as BAT, HTML, or EML, causing the file to be treated as a safe ty...

CVE-2005-3380

CVE-2005-3380 affects Panda Titanium 2005 4.02.01. A multiple interpretation error lets a file such as BAT, HTML, or EML containing an MZ magic byte sequence (normally associated with EXE) be treated as a safe type, yet could still be executed as a dangerous file type by end-system applications. ...

CVE-2005-3379

CVE-2005-3379 describes a multiple interpretation error in Trend Micro products: PC-Cillin 2005 (version 12.0.1244 with engine 7.510.1002) and OfficeScan 7.0 (engine 7.510.1002). The bug arises from how the scanner handles files with an "MZ" magic byte sequence (normally associated with EXE). Suc...

CVE-2005-3381

Multiple interpretation error in Ukrainian National Antivirus UNA 1.83.2.16 with kernel 265 allows remote attackers to bypass virus scanning via a file such as BAT, HTML, and EML with an "MZ" magic byte sequence which is normally associated with EXE, which causes the file to be treated as a safe...

CVE-2005-3373

Multiple interpretation error in Dr.Web 4.32b allows remote attackers to bypass virus scanning via a file such as BAT, HTML, and EML with an "MZ" magic byte sequence which is normally associated with EXE, which causes the file to be treated as a safe type that could still be executed as a dangero...

CVE-2005-3375

CVE-2005-3375 involves an interpretation error in the Ikarus demo version where a file with a BAT/HTML/EML content containing an MZ magic-byte is treated as a safe type, enabling a remote attacker to bypass virus scanning. The vulnerability is demonstrated by a “triple headed” program containing ...

CVE-2005-3375

Multiple interpretation error in Ikarus demo version allows remote attackers to bypass virus scanning via a file such as BAT, HTML, and EML with an "MZ" magic byte sequence which is normally associated with EXE, which causes the file to be treated as a safe type that could still be executed as a...

CVE-2005-3378

Multiple interpretation error in Norman 5.81 with the 5.83.02 engine allows remote attackers to bypass virus scanning via a file such as BAT, HTML, and EML with an "MZ" magic byte sequence which is normally associated with EXE, which causes the file to be treated as a safe type that could still b...

CVE-2005-3382

Multiple interpretation error in Sophos 3.91 with the 2.28.4 engine allows remote attackers to bypass virus scanning via a file such as BAT, HTML, and EML with an "MZ" magic byte sequence which is normally associated with EXE, which causes the file to be treated as a safe type that could still be...

CVE-2005-3372

Multiple interpretation error in eTrust CA 7.0.1.4 with the 11.9.1 engine allows remote attackers to bypass virus scanning via a file such as BAT, HTML, and EML with an "MZ" magic byte sequence which is normally associated with EXE, which causes the file to be treated as a safe type that could...

CVE-2005-3376

The CVE-2005-3376 issue affects Kaspersky (version 5.0.372). It arises from a multiple interpretation error where a file containing BAT, HTML, or EML data with an MZ (EXE) magic byte is misclassified as a safe type, allowing it to be treated as non-executable by the scanner yet potentially execut...

CVE-2005-3373

The CVE-2005-3373 entry describes a vulnerability in Dr.Web 4.32b where an interpretation error in the virus scanner allows a crafted file (e.g., BAT, HTML, or EML) containing an MZ magic byte sequence (normally for EXE) to be treated as a safe type, yet still be executable as a dangerous file by...

CVE-2005-3381

The CVE-2005-3381 entry concerns Ukrainian National Antivirus (UNA) 1.83.2.16 on kernel 265, where a multiple interpretation error in the file-type handling allows bypass of virus scanning. An attacker can supply a file (BAT, HTML, or EML) containing an MZ executable-like magic byte sequence that...