Lucene search

MitreCVE-2012-1429

HistoryMar 21, 2012 - 10:11 a.m.

CVE-2012-1429

2012-03-2110:11:47

CWE-264

mitre

web.nvd.nist.gov

cve-2012-1429

elf file parser

bitdefender

comodo antivirus

emsisoft anti-malware

esafe

f-secure anti-virus

ikarus virus utilities

mcafee anti-virus

nprotect anti-virus

CVSS2

4.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

AI Score

6.7

Confidence

Low

EPSS

0.974

Percentile

99.9%

JSON

The ELF file parser in Bitdefender 7.2, Comodo Antivirus 7424, Emsisoft Anti-Malware 5.1.0.1, eSafe 7.0.17.0, F-Secure Anti-Virus 9.0.16160.0, Ikarus Virus Utilities T3 Command Line Scanner 1.1.97.0, McAfee Anti-Virus Scanning Engine 5.400.0.1158, McAfee Gateway (formerly Webwasher) 2010.1C, and nProtect Anti-Virus 2011-01-17.01 allows remote attackers to bypass malware detection via an ELF file with a ustar character sequence at a certain location. NOTE: this may later be SPLIT into multiple CVEs if additional information is published showing that the error occurred independently in different ELF parser implementations.

Affected configurations

Nvd

Node

aladdinesafeMatch7.0.17.0

comodocomodo_antivirusMatch7424

emsisoftanti-malwareMatch5.1.0.1

f-securef-secure_anti-virusMatch9.0.16160.0

ikarusikarus_virus_utilities_t3_command_line_scannerMatch1.1.97.0

mcafeegatewayMatch2010.1c

mcafeescan_engineMatch5.400.0.1158

nprotectnprotect_antivirusMatch2011-01-17.01

softwinbitdefenderMatch7.2

VendorProductVersionCPE
aladdinesafe7.0.17.0cpe:2.3:a:aladdin:esafe:7.0.17.0:*:*:*:*:*:*:*
comodocomodo_antivirus7424cpe:2.3:a:comodo:comodo_antivirus:7424:*:*:*:*:*:*:*
emsisoftanti-malware5.1.0.1cpe:2.3:a:emsisoft:anti-malware:5.1.0.1:*:*:*:*:*:*:*
f-securef-secure_anti-virus9.0.16160.0cpe:2.3:a:f-secure:f-secure_anti-virus:9.0.16160.0:*:*:*:*:*:*:*
ikarusikarus_virus_utilities_t3_command_line_scanner1.1.97.0cpe:2.3:a:ikarus:ikarus_virus_utilities_t3_command_line_scanner:1.1.97.0:*:*:*:*:*:*:*
mcafeegateway2010.1ccpe:2.3:a:mcafee:gateway:2010.1c:*:*:*:*:*:*:*
mcafeescan_engine5.400.0.1158cpe:2.3:a:mcafee:scan_engine:5.400.0.1158:*:*:*:*:*:*:*
nprotectnprotect_antivirus2011-01-17.01cpe:2.3:a:nprotect:nprotect_antivirus:2011-01-17.01:*:*:*:*:*:*:*
softwinbitdefender7.2cpe:2.3:a:softwin:bitdefender:7.2:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
aladdin	esafe	7.0.17.0	cpe:2.3:a:aladdin:esafe:7.0.17.0:::::::*
comodo	comodo_antivirus	7424	cpe:2.3:a:comodo:comodo_antivirus:7424:::::::*
emsisoft	anti-malware	5.1.0.1	cpe:2.3:a:emsisoft:anti-malware:5.1.0.1:::::::*
f-secure	f-secure_anti-virus	9.0.16160.0	cpe:2.3:a:f-secure:f-secure_anti-virus:9.0.16160.0:::::::*
ikarus	ikarus_virus_utilities_t3_command_line_scanner	1.1.97.0	cpe:2.3:a:ikarus:ikarus_virus_utilities_t3_command_line_scanner:1.1.97.0:::::::*
mcafee	gateway	2010.1c	cpe:2.3:a:mcafee:gateway:2010.1c:::::::*
mcafee	scan_engine	5.400.0.1158	cpe:2.3:a:mcafee:scan_engine:5.400.0.1158:::::::*
nprotect	nprotect_antivirus	2011-01-17.01	cpe:2.3:a:nprotect:nprotect_antivirus:2011-01-17.01:::::::*
softwin	bitdefender	7.2	cpe:2.3:a:softwin:bitdefender:7.2:::::::*

References

www.ieee-security.org/TC/SP2012/program.html

www.securityfocus.com/archive/1/522005

exchange.xforce.ibmcloud.com/vulnerabilities/74244

CVSS2

4.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

AI Score

6.7

Confidence

Low

EPSS

0.974

Percentile

99.9%

JSON

Related for CVE-2012-1429