CVE-2012-1429
Summary
| CVE | CVE-2012-1429 |
|---|---|
| State | PUBLIC |
| Assigner | [email protected] |
| Source Priority | CVE Program / NVD first with legacy fallback |
| Published | 2012-03-21 10:11:00 UTC |
| Updated | 2017-08-29 01:31:00 UTC |
| Description | The ELF file parser in Bitdefender 7.2, Comodo Antivirus 7424, Emsisoft Anti-Malware 5.1.0.1, eSafe 7.0.17.0, F-Secure Anti-Virus 9.0.16160.0, Ikarus Virus Utilities T3 Command Line Scanner 1.1.97.0, McAfee Anti-Virus Scanning Engine 5.400.0.1158, McAfee Gateway (formerly Webwasher) 2010.1C, and nProtect Anti-Virus 2011-01-17.01 allows remote attackers to bypass malware detection via an ELF file with a ustar character sequence at a certain location. NOTE: this may later be SPLIT into multiple CVEs if additional information is published showing that the error occurred independently in different ELF parser implementations. |
Risk And Classification
Problem Types: CWE-264
NVD Known Affected Configurations (CPE 2.3)
| Type | Vendor | Product | Version | Update | Edition | Language |
|---|---|---|---|---|---|---|
| Application | Aladdin | Esafe | 7.0.17.0 | All | All | All |
| Application | Aladdin | Esafe | 7.0.17.0 | All | All | All |
| Application | Comodo | Comodo Antivirus | 7424 | All | All | All |
| Application | Comodo | Comodo Antivirus | 7424 | All | All | All |
| Application | Emsisoft | Anti-malware | 5.1.0.1 | All | All | All |
| Application | Emsisoft | Anti-malware | 5.1.0.1 | All | All | All |
| Application | F-secure | F-secure Anti-virus | 9.0.16160.0 | All | All | All |
| Application | F-secure | F-secure Anti-virus | 9.0.16160.0 | All | All | All |
| Application | Ikarus | Ikarus Virus Utilities T3 Command Line Scanner | 1.1.97.0 | All | All | All |
| Application | Ikarus | Ikarus Virus Utilities T3 Command Line Scanner | 1.1.97.0 | All | All | All |
| Application | Mcafee | Gateway | 2010.1c | All | All | All |
| Application | Mcafee | Gateway | 2010.1c | All | All | All |
| Application | Mcafee | Scan Engine | 5.400.0.1158 | All | All | All |
| Application | Mcafee | Scan Engine | 5.400.0.1158 | All | All | All |
| Application | Nprotect | Nprotect Antivirus | 2011-01-17.01 | All | All | All |
| Application | Nprotect | Nprotect Antivirus | 2011-01-17.01 | All | All | All |
| Application | Softwin | Bitdefender | 7.2 | All | All | All |
| Application | Softwin | Bitdefender | 7.2 | All | All | All |
References
| Reference | Source | Link | Tags |
|---|---|---|---|
| IEEE Symposium on Security and Privacy 2012 | MISC | www.ieee-security.org | |
| SecurityFocus | BUGTRAQ | www.securityfocus.com | |
| IBM X-Force Exchange | XF | exchange.xforce.ibmcloud.com | |
| CVE Program record | CVE.ORG | www.cve.org | canonical |
| NVD vulnerability detail | NVD | nvd.nist.gov | canonical, analysis |
No vendor comments have been submitted for this CVE.
There are currently no legacy QID mappings associated with this CVE.