CVE-2012-1431

published 2012-03-21

CVE-2012-1431: The ELF file parser in Bitdefender 7.2, Command Antivirus 5.2.11.5, Comodo Antivirus 7424, eSafe 7.0.17.0, F-Prot Antivirus 4.6.2.117, F-Secure Anti-Virus…

Priority P3 40 medium 4.3 CVSS 2.0

AV N AC M Au N C N I P A N

The ELF file parser in Bitdefender 7.2, Command Antivirus 5.2.11.5, Comodo Antivirus 7424, eSafe 7.0.17.0, F-Prot Antivirus 4.6.2.117, F-Secure Anti-Virus 9.0.16160.0, McAfee Gateway (formerly Webwasher) 2010.1C, nProtect Anti-Virus 2011-01-17.01, Sophos Anti-Virus 4.61.0, and Rising Antivirus 22.83.00.03 allows remote attackers to bypass malware detection via an ELF file with a \4a\46\49\46 character sequence at a certain location. NOTE: this may later be SPLIT into multiple CVEs if additional information is published showing that the error occurred independently in different ELF parser implementations.

Affected

10 ranges

Vendor	Product	Version range	Fixed in
aladdin	esafe	—	—
authentium	command_antivirus	—	—
bitdefender	bitdefender	—	—
comodo	comodo_antivirus	—	—
f-prot	f-prot_antivirus	—	—
f-secure	f-secure_anti-virus	—	—
mcafee	gateway	—	—
nprotect	nprotect_antivirus	—	—
rising-global	rising_antivirus	—	—
sophos	sophos_anti-virus	—	—

Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.

CWE-264