CVE-2012-1429
published 2012-03-21CVE-2012-1429: The ELF file parser in Bitdefender 7.2, Comodo Antivirus 7424, Emsisoft Anti-Malware 5.1.0.1, eSafe 7.0.17.0, F-Secure Anti-Virus 9.0.16160.0, Ikarus Virus…
PriorityP338medium4.3CVSS 2.0
AVNACMAuNCNIPAN
EPSS
92.63%
99.8th percentile
The ELF file parser in Bitdefender 7.2, Comodo Antivirus 7424, Emsisoft Anti-Malware 5.1.0.1, eSafe 7.0.17.0, F-Secure Anti-Virus 9.0.16160.0, Ikarus Virus Utilities T3 Command Line Scanner 1.1.97.0, McAfee Anti-Virus Scanning Engine 5.400.0.1158, McAfee Gateway (formerly Webwasher) 2010.1C, and nProtect Anti-Virus 2011-01-17.01 allows remote attackers to bypass malware detection via an ELF file with a ustar character sequence at a certain location. NOTE: this may later be SPLIT into multiple CVEs if additional information is published showing that the error occurred independently in different ELF parser implementations.
Affected
9 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| aladdin | esafe | — | — |
| comodo | comodo_antivirus | — | — |
| emsisoft | anti-malware | — | — |
| f-secure | f-secure_anti-virus | — | — |
| ikarus | ikarus_virus_utilities_t3_command_line_scanner | — | — |
| mcafee | gateway | — | — |
| mcafee | scan_engine | — | — |
| nprotect | nprotect_antivirus | — | — |
| softwin | bitdefender | — | — |
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
http://www.ieee-security.org/TC/SP2012/program.htmlhttp://www.securityfocus.com/archive/1/522005https://exchange.xforce.ibmcloud.com/vulnerabilities/74244http://www.ieee-security.org/TC/SP2012/program.htmlhttp://www.securityfocus.com/archive/1/522005https://exchange.xforce.ibmcloud.com/vulnerabilities/74244
2012-03-21
Published