CVE-2012-1440

CWE-2643 documents3 sources
Severity
4.3MEDIUM
EPSS
0.3%
top 43.44%
CISA KEV
Not in KEV
Exploit
No known exploits
Timeline
PublishedMar 21
Latest updateMay 17

Description

The ELF file parser in Norman Antivirus 6.06.12, eSafe 7.0.17.0, CA eTrust Vet Antivirus 36.1.8511, Fortinet Antivirus 4.2.254.0, and Panda Antivirus 10.0.2.7 allows remote attackers to bypass malware detection via an ELF file with a modified identsize field. NOTE: this may later be SPLIT into multiple CVEs if additional information is published showing that the error occurred independently in different ELF parser implementations.

CVSS vector

AV:N/AC:M/C:N/I:P/A:NExploitability: 8.6 | Impact: 2.9

Affected Packages5 packages

🔴Vulnerability Details

2
GHSA
GHSA-2g49-vjmj-qp9h: The ELF file parser in Norman Antivirus 62022-05-17
CVEList
CVE-2012-1440: The ELF file parser in Norman Antivirus 62012-03-21
CVE-2012-1440 (MEDIUM CVSS 4.3) | The ELF file parser in Norman Antiv | cvebase.io