Multiple Vendor Antivirus Products Malformed Archives Scan Evasion Vulnerability

Bugtraq ID:	15046
Class:	Input Validation Error
CVE:
Remote:	Yes
Local:	No
Published:	Oct 08 2005 12:00AM
Updated:	Oct 08 2005 12:00AM
Credit:	fRoGGz of SecuBox Labs is credited with the discovery of this issue.
Vulnerable:	VirusBlokAda VBA32 Ukrainian Antiviral Center Ukrainian National Antivirus Symantec Norton AntiVirus for Windows ME 2001 - Microsoft Windows ME Symantec Norton AntiVirus for MS Exchange 2.18.88 Symantec Norton AntiVirus for MS Exchange 2.18.85 Symantec Norton AntiVirus for MS Exchange 2.18.82 Symantec Norton AntiVirus for MS Exchange 2.5 Symantec Norton AntiVirus for MS Exchange 2.1 Symantec Norton AntiVirus for MS Exchange 2.0 Symantec Norton AntiVirus for MS Exchange 1.5 - Microsoft Exchange Server 5.0 - Microsoft Windows NT 4.0 Symantec Norton AntiVirus for Microsoft Exchange 2.18 build 83 Symantec Norton Antivirus for Macintosh Corporate Edition 9.0 Symantec Norton AntiVirus for Internet Email Gateways 1.0 Symantec Norton AntiVirus Corporate Edition 8.0 Symantec Norton AntiVirus Corporate Edition 7.61 Symantec Norton AntiVirus Corporate Edition 7.51 Symantec Norton AntiVirus Corporate Edition 7.6 Symantec Norton AntiVirus Corporate Edition 7.5 Symantec Norton AntiVirus Corporate Edition 7.2 Symantec Norton AntiVirus Corporate Edition 7.0 Symantec Norton AntiVirus Corporate Edition 7.60.build 926 Symantec Norton Antivirus 9.0 for Macintosh Symantec Norton Antivirus 9.0 for Macintosh Symantec Norton Antivirus 8.0 for Macintosh Symantec Norton Antivirus 7.0 for Macintosh Symantec Norton AntiVirus 2005 Professional Edition Symantec Norton AntiVirus 2005 11.0.9 + Symantec Norton Internet Security 2005 11.0.9 + Symantec Norton Internet Security 2005 + Symantec Norton System Works 2005 11.0.9 + Symantec Norton System Works 2005 Premier Symantec Norton AntiVirus 2005 11.0 Symantec Norton AntiVirus 2005 Symantec Norton AntiVirus 2004 Professional Edition Symantec Norton Antivirus 2004 for Macintosh Symantec Norton AntiVirus 2004 Symantec Norton AntiVirus 2003 Professional Edition Symantec Norton Antivirus 2003 0 Symantec Norton AntiVirus 2002 Professional Edition Symantec Norton AntiVirus 2002 0 Symantec Norton AntiVirus 2001 Professional Edition Symantec Norton AntiVirus 2001 0 Symantec Norton AntiVirus 5.0 2 Symantec Norton AntiVirus 5.0 Symantec Norton AntiVirus 4.0 for NT Symantec Norton AntiVirus 2000 Symantec AntiVirus/Filtering for Domino Ports 3.0.7 (Solaris) Symantec AntiVirus/Filtering for Domino Ports 3.0.7 (OS400) Symantec AntiVirus/Filtering for Domino Ports 3.0.7 (Linux) Symantec AntiVirus/Filtering for Domino Ports 3.0.7 Symantec AntiVirus/Filtering for Domino Ports 3.0.6 (AIX) Symantec AntiVirus/Filtering for Domino Ports 3.0.6 Symantec AntiVirus/Filtering for Domino Ports 3.0.5 Symantec AntiVirus/Filtering for Domino Ports 3.0 (Solaris)build 3.0.5 Symantec AntiVirus/Filtering for Domino Ports 3.0 (S390) Symantec AntiVirus/Filtering for Domino Ports 3.0 (OS400) build 3.0.5 Symantec AntiVirus/Filtering for Domino Ports 3.0 (Linux) build 3.0.5 Symantec AntiVirus/Filtering for Domino Ports 3.0 (AIX) build 3.0.5 Symantec AntiVirus/Filtering for Domino Ports 3.0 Symantec AntiVirus/Filtering for Domino NT 3.1.1 Symantec AntiVirus/Filtering for Domino NT 3.1 build 3.1.1 Symantec AntiVirus/Filtering for Domino NT 3.1 Symantec AntiVirus Scan Engine for Red Hat Linux 4.3 Symantec AntiVirus Scan Engine for Red Hat Linux 4.0 Symantec AntiVirus Scan Engine for Network Attached Storage 4.3.12 Symantec AntiVirus Scan Engine for Network Attached Storage 4.3 Symantec AntiVirus Scan Engine for Netapp NetCache 4.3.12 Symantec AntiVirus Scan Engine for Netapp NetCache 4.3 build 4.3.3 Symantec AntiVirus Scan Engine for Netapp NetCache 4.3 Symantec AntiVirus Scan Engine for Netapp NetCache 4.0 Symantec AntiVirus Scan Engine for Netapp Filer 4.3.12 Symantec AntiVirus Scan Engine for Netapp Filer 4.3 build 4.3.3 Symantec AntiVirus Scan Engine for Netapp Filer 4.3 Symantec AntiVirus Scan Engine for Netapp Filer 4.0 Symantec AntiVirus Scan Engine for Microsoft SharePoint 4.3.12 Symantec AntiVirus Scan Engine for Microsoft SharePoint 4.3 Symantec AntiVirus Scan Engine for Microsoft Portal 4.3 Symantec AntiVirus Scan Engine for Messaging 4.3.12 Symantec AntiVirus Scan Engine for Messaging 4.3 Symantec AntiVirus Scan Engine for ISA 4.3.12 Symantec AntiVirus Scan Engine for ISA 4.3 build 4.3.3 Symantec AntiVirus Scan Engine for ISA 4.3 Symantec AntiVirus Scan Engine for ISA 4.0 Symantec AntiVirus Scan Engine for Filers 4.3 build 4.3.3 Symantec AntiVirus Scan Engine for Filers 4.3 Symantec AntiVirus Scan Engine for Clearswift 4.3.12 Symantec AntiVirus Scan Engine for Clearswift 4.3 Symantec AntiVirus Scan Engine for Clearswift 4.0 Symantec AntiVirus Scan Engine for Caching 4.3.12 Symantec AntiVirus Scan Engine for Caching 4.3 Symantec AntiVirus Scan Engine for Bluecoat 4.3.12 Symantec AntiVirus Scan Engine for Bluecoat 4.3 build 4.3.3 Symantec AntiVirus Scan Engine for Bluecoat 4.3 Symantec AntiVirus Scan Engine for Bluecoat 4.0 Symantec AntiVirus Scan Engine 4.3.12 Symantec AntiVirus Scan Engine 4.3.3 Symantec AntiVirus Scan Engine 4.3 build 4.3.8.29 Symantec AntiVirus Scan Engine 4.3 build 4.3.7.27 Symantec AntiVirus Scan Engine 4.3 build 4.3.3 Symantec AntiVirus Scan Engine 4.3 Symantec AntiVirus Scan Engine 4.1 Symantec AntiVirus Scan Engine 4.0 Symantec AntiVirus for SMTP 3.1.7 Symantec AntiVirus for SMTP 3.1 build 3.1.6 Symantec AntiVirus for SMTP 3.1 build 3.1.5 Symantec AntiVirus for SMTP 3.1 build 3.1.4 Symantec AntiVirus for SMTP 3.1 build 3.1.3 Symantec AntiVirus for SMTP 3.1 build 3.1.2 Symantec AntiVirus for SMTP 3.1 build 3.1.1 Symantec AntiVirus for SMTP 3.1 Symantec AntiVirus for SMTP 3.0 build 3.0.0.29 Symantec AntiVirus for Network Attached Storage Symantec Antivirus for MS Office SharePoint Portal Server 2003 Symantec AntiVirus for Microsoft Office Symantec AntiVirus for Microsoft Exchange 2.18 build 88 Symantec AntiVirus for Microsoft Exchange 2.18 build 85 Symantec AntiVirus for Microsoft Exchange 2.18 build 82 Symantec AntiVirus for Handhelds Corporate Edition 3.0 Symantec AntiVirus for Handhelds 3.0 .0.194 Symantec AntiVirus for Handhelds 3.0 Symantec AntiVirus for Caching 4.3.3 Symantec AntiVirus for Caching build 4.3.3 Symantec AntiVirus for Caching Symantec AntiVirus Corporate Edition 10.0 Symantec AntiVirus Corporate Edition 9.0.4 Symantec AntiVirus Corporate Edition 9.0.3 .1000 Symantec AntiVirus Corporate Edition 9.0.2 .1000 Symantec AntiVirus Corporate Edition 9.0.1 .1.1000 Symantec AntiVirus Corporate Edition 9.0 .0.338 Symantec AntiVirus Corporate Edition 9.0 Symantec AntiVirus Corporate Edition 8.1.1 build 8.1.1.329 Symantec AntiVirus Corporate Edition 8.1.1 build 8.1.1.323 Symantec AntiVirus Corporate Edition 8.1.1 build 8.1.1.319 Symantec AntiVirus Corporate Edition 8.1.1 build 8.1.1.314a Symantec AntiVirus Corporate Edition 8.1.1 .377 Symantec AntiVirus Corporate Edition 8.1.1 .366 Symantec AntiVirus Corporate Edition 8.1.1 Symantec AntiVirus Corporate Edition 8.1 build 8.01.471 Symantec AntiVirus Corporate Edition 8.1 build 8.01.464 Symantec AntiVirus Corporate Edition 8.1 build 8.01.460 Symantec AntiVirus Corporate Edition 8.1 build 8.01.457 Symantec AntiVirus Corporate Edition 8.1 build 8.01.446 Symantec AntiVirus Corporate Edition 8.1 build 8.01.437 Symantec AntiVirus Corporate Edition 8.1 build 8.01.434 Symantec AntiVirus Corporate Edition 8.1 .0.825a Symantec AntiVirus Corporate Edition 8.1 Symantec AntiVirus Corporate Edition 8.0 1.9378 Symantec AntiVirus Corporate Edition 8.0 1.9374 Symantec AntiVirus Corporate Edition 8.0 1.501 Symantec AntiVirus Corporate Edition 8.0 1.429c Symantec AntiVirus Corporate Edition 8.0 1.425a/b Symantec AntiVirus Corporate Edition 8.0 1 Symantec AntiVirus Corporate Edition 8.0 Sophos Anti-Virus Engine 2.30.4 Sophos Anti-Virus 5.0.4 Sophos Anti-Virus 5.0.1 Sophos Anti-Virus 4.5.4 Sophos Anti-Virus 4.5.3 Sophos Anti-Virus 3.96 .0 Sophos Anti-Virus 3.95 Sophos Anti-Virus 3.91 Sophos Anti-Virus 3.90 Sophos Anti-Virus 3.86 Sophos Anti-Virus 3.85 Sophos Anti-Virus 3.84 Sophos Anti-Virus 3.83 Sophos Anti-Virus 3.82 Sophos Anti-Virus 3.81 Sophos Anti-Virus 3.80 Sophos Anti-Virus 3.79 Sophos Anti-Virus 3.78 d Sophos Anti-Virus 3.78 Sophos Anti-Virus 3.4.6 Softwin BitDefender Professional Plus Softwin BitDefender Online Scanner Softwin BitDefender Internet Security Softwin BitDefender for SharePoint Server Softwin BitDefender for Sendmail Milter Softwin BitDefender for Sendmail Softwin BitDefender for Samba Linux File Servers Softwin BitDefender for qmail Softwin BitDefender for Postfix Softwin BitDefender for MS Exchange 5.5 Softwin BitDefender for MS Exchange 2003 Softwin BitDefender for MS Exchange 2000 Softwin BitDefender for Mail Servers - Linux SMTP Proxy Softwin BitDefender for Lotus Domino Softwin BitDefender for ISA Server Softwin BitDefender for FileServer Softwin BitDefender for Courier Softwin BitDefender for CommuniGate Pro Softwin BitDefender Antivirus & Antispam for Linux 1.6.2 Softwin BitDefender Antivirus & Antispam for Linux 1.6.1 Softwin BitDefender Antispam for Mail Servers (WIN SMTP) Softwin BitDefender Antispam Softwin BitDefender 9.0 Softwin BitDefender 8.0 Softwin BitDefender 7.2 Softwin BitDefender 7.0 Softwin BitDefender Panda Antivirus Platinum 2.0 Panda Antivirus for NetWare 2.0 Panda ActiveScan 5.0 Norman Virus Control for OS/2 5.5 Norman Virus Control for OS/2 5.4 Norman Virus Control for OS/2 5.3 Norman Virus Control for OS/2 5.2 Norman Virus Control for OS/2 5.1 Norman Virus Control for OS/2 5.0 Norman Virus Control for MIMESweeper 5.5 Norman Virus Control for MIMESweeper 5.4 Norman Virus Control for MIMESweeper 5.3 Norman Virus Control for MIMESweeper 5.2 Norman Virus Control for MIMESweeper 5.1 Norman Virus Control for MIMESweeper 5.0 Norman Virus Control for Lotus Domino 5.5 Norman Virus Control for Lotus Domino 5.4 Norman Virus Control for Lotus Domino 5.3 Norman Virus Control for Lotus Domino 5.2 Norman Virus Control for Lotus Domino 5.1 Norman Virus Control for Lotus Domino 5.0 Norman Virus Control for Linux 5.5 Norman Virus Control for Linux 5.4 Norman Virus Control for Linux 5.3 Norman Virus Control for Linux 5.2 Norman Virus Control for Linux 5.1 Norman Virus Control for Linux 5.0 Norman Virus Control for IIS 5.5 Norman Virus Control for IIS 5.4 Norman Virus Control for IIS 5.3 Norman Virus Control for IIS 5.2 Norman Virus Control for IIS 5.1 Norman Virus Control for IIS 5.0 Norman Virus Control for Firewall-1 5.5 Norman Virus Control for Firewall-1 5.4 Norman Virus Control for Firewall-1 5.3 Norman Virus Control for Firewall-1 5.2 Norman Virus Control for Firewall-1 5.1 Norman Virus Control for Firewall-1 5.0 Norman Virus Control for Exchange 5.5 5.5 Norman Virus Control for Exchange 5.5 5.4 Norman Virus Control for Exchange 5.5 5.3 Norman Virus Control for Exchange 5.5 5.2 Norman Virus Control for Exchange 5.5 5.1 Norman Virus Control for Exchange 5.5 5.0 Norman Virus Control for Exchange 2000 5.5 Norman Virus Control for Exchange 2000 5.4 Norman Virus Control for Exchange 2000 5.3 Norman Virus Control for Exchange 2000 5.2 Norman Virus Control for Exchange 2000 5.1 Norman Virus Control for Exchange 2000 5.0 Norman Virus Control 5.7 Norman Virus Control 5.5 Norman Virus Control 5.4 Norman Virus Control 5.3 Norman Virus Control 5.2 Norman Virus Control 5.1 Norman Virus Control 5.0 McAfee VirusScan Professional McAfee VirusScan for NetApp McAfee VirusScan for Linux 4.32 McAfee VirusScan for Linux 4.16 McAfee VirusScan Enterprise 8.0 i McAfee VirusScan Enterprise 7.1 McAfee VirusScan Command Line McAfee VirusScan 9.0 McAfee VirusScan 8.0 McAfee VirusScan 7.1 McAfee VirusScan 7.0 McAfee VirusScan 6.0 McAfee VirusScan 5.0 McAfee VirusScan 4.5.1 - Microsoft Windows 2000 Professional SP3 - Microsoft Windows 2000 Professional SP2 - Microsoft Windows 2000 Professional SP1 - Microsoft Windows 2000 Professional - Microsoft Windows 95 SR2 - Microsoft Windows 95 - Microsoft Windows 98 - Microsoft Windows 98SE - Microsoft Windows ME - Microsoft Windows NT Workstation 4.0 SP6a - Microsoft Windows NT Workstation 4.0 SP6 - Microsoft Windows NT Workstation 4.0 SP5 - Microsoft Windows NT Workstation 4.0 SP4 - Microsoft Windows NT Workstation 4.0 SP3 - Microsoft Windows NT Workstation 4.0 SP2 - Microsoft Windows NT Workstation 4.0 SP1 - Microsoft Windows NT Workstation 4.0 - Microsoft Windows XP Home SP1 - Microsoft Windows XP Home - Microsoft Windows XP Professional SP1 - Microsoft Windows XP Professional McAfee VirusScan 4.5 McAfee VirusScan 4.0.3 McAfee VirusScan 4.0 McAfee VirusScan 3.0 McAfee VirusScan 2.0 McAfee VirusScan 1.0 McAfee ASaP VirusScan 0 McAfee Antivirus Engine 4.3.20 McAfee Active VirusScan SMB Edition McAfee Active VirusScan Kaspersky Labs Kaspersky Antivirus for Linux Servers 5.5 Kaspersky Labs Kaspersky Antivirus for Linux Servers 5.0.1 .0 Kaspersky Labs Kaspersky Antivirus for Linux Servers 3.5.135 .2 Kaspersky Labs Antivirus Scanning Engine 5.0 Kaspersky Labs Antivirus Scanning Engine 4.0 Kaspersky Labs Antivirus Scanning Engine 3.0 Kaspersky Labs Anti-Virus Personal Pro 5.0 Kaspersky Labs Anti-Virus Personal 5.0 Kaspersky Labs Anti-Virus for Windows Workstations 5.0 Kaspersky Labs Anti-Virus for Windows File Servers 5.0 Kaspersky Labs Anti-Virus 5.0.335 Kaspersky Labs Anti-Virus 5.0.228 Kaspersky Labs Anti-Virus 5.0.227 Kaspersky Kaspersky Antivirus 4.0.9 .0 Ikarus Ikarus 2.32 Hacksoft TheHacker 5.8 H+BEDV AntiVir Windows Workstation 6.30 .0.5 H+BEDV AntiVir Windows Workstation 6.28 .00.07 H+BEDV AntiVir Windows Workstation 6.28 .00.01 H+BEDV AntiVir Windows Server NT/2000/2003 6.28 .01.10 H+BEDV AntiVir Windows Server NT/2000/2003 6.28 .01.03 H+BEDV AntiVir DOS 6.28 .00.07 H+BEDV AntiVir DOS 6.28 .00.03 H+BEDV AntiVir 2.0.9 -12 H+BEDV AntiVir 2.0.9 Fortinet Antivirus F-Secure Anti-Virus Linux Server Security 5.0 1 F-Secure Anti-Virus Linux Server Security 5.0 F-secure Anti-Virus Linux Client Security 5.0 1 F-secure Anti-Virus Linux Client Security 5.0 F-Secure Anti-Virus for Workstations 5.43 F-Secure Anti-Virus for Workstations 5.42 F-Secure Anti-Virus for Workstations 5.41 F-Secure Anti-Virus for Workstations 5.40 F-Secure Anti-Virus for Windows Servers 5.50 F-Secure Anti-Virus for Windows Servers 5.42 F-Secure Anti-Virus for Windows Servers 5.41 F-Secure Anti-Virus for Samba Servers 4.60 F-Secure Anti-Virus for MS Exchange 6.31 F-Secure Anti-Virus for MS Exchange 6.31 F-Secure Anti-Virus for MS Exchange 6.30 Service Release 1 F-Secure Anti-Virus for MS Exchange 6.21 F-Secure Anti-Virus for MS Exchange 6.3 0 F-Secure Anti-Virus for MS Exchange 6.2 F-Secure Anti-Virus for MS Exchange 6.0 1 F-Secure Anti-Virus for MIMEsweeper 5.51 F-Secure Anti-Virus for MIMEsweeper 5.50 F-Secure Anti-Virus for MIMEsweeper 5.42 F-Secure Anti-Virus for MIMEsweeper 5.41 F-Secure Anti-Virus for Linux Workstations 4.52 F-Secure Anti-Virus for Linux Workstations 4.51 F-Secure Anti-Virus for Linux Servers 4.61 F-Secure Anti-Virus for Linux Servers 4.52 F-Secure Anti-Virus for Linux Servers 4.51 F-Secure Anti-Virus for Linux Gateways 4.61 F-Secure Anti-Virus for Linux Gateways 4.52 F-Secure Anti-Virus for Linux Gateways 4.51 F-Secure Anti-Virus For Linux 4.52 F-Secure Anti-Virus for Firewalls 6.20 F-Secure Anti-Virus for File Servers 5.42 F-Secure Anti-Virus for File Servers 5.41 F-Secure Anti-Virus for Citrix Servers 5.5 F-Secure Anti-Virus Client Security 5.55 F-Secure Anti-Virus Client Security 5.54 F-Secure Anti-Virus Client Security 5.52 F-Secure Anti-Virus Client Security 5.50 F-secure Anti-Virus 2005 F-Secure Anti-Virus 2004 F-Secure Anti-Virus 2003 F-Secure Anti-Virus 5.3 .0 F-Secure Anti-Virus 5.2.1 F-Secure Anti-Virus 5.0.2 Eset Software NOD32 Antivirus 2.5 Eset Software NOD32 Antivirus 1.0 13 Eset Software NOD32 Antivirus 1.0 12 Eset Software NOD32 Antivirus 1.0 11 Dr.Web Dr.Web 4.31.4 Dr.Web Dr.Web Computer Associates Vet Antivirus 11.9.1 Computer Associates Vet Antivirus 10.67 Computer Associates Vet Antivirus 10.66 Computer Associates eTrust EZ Antivirus 7.0.5 Computer Associates eTrust EZ Antivirus 7.0.4 Computer Associates eTrust EZ Antivirus 7.0.3 Computer Associates eTrust EZ Antivirus 7.0.2 .1 Computer Associates eTrust EZ Antivirus 7.0.2 Computer Associates eTrust EZ Antivirus 7.0.1 .4 Computer Associates eTrust EZ Antivirus 7.0.1 .3 Computer Associates eTrust EZ Antivirus 7.0.1 .2 Computer Associates eTrust EZ Antivirus 7.0.1 .1 Computer Associates eTrust EZ Antivirus 7.0.1 Computer Associates eTrust EZ Antivirus 7.0 Computer Associates eTrust EZ Antivirus 6.3 Computer Associates eTrust EZ Antivirus 6.2 Computer Associates eTrust EZ Antivirus 6.1 Computer Associates eTrust Antivirus for the Gateway 7.1 Computer Associates eTrust Antivirus for the Gateway 7.0 Computer Associates eTrust Antivirus EE 7.0 Computer Associates eTrust Antivirus EE 6.0 Computer Associates eTrust Antivirus 7.1 Computer Associates eTrust Antivirus 7.0 SP2 Computer Associates eTrust Antivirus 7.0 Computer Associates eTrust Antivirus 6.0 Clam Anti-Virus ClamAV 0.87 Clam Anti-Virus ClamAV 0.86.2 Clam Anti-Virus ClamAV 0.86 .1 Clam Anti-Virus ClamAV 0.86 Clam Anti-Virus ClamAV 0.85.1 Clam Anti-Virus ClamAV 0.85 Clam Anti-Virus ClamAV 0.84 rc2 Clam Anti-Virus ClamAV 0.84 rc1 Clam Anti-Virus ClamAV 0.84 Clam Anti-Virus ClamAV 0.83 Clam Anti-Virus ClamAV 0.82 Clam Anti-Virus ClamAV 0.81 Clam Anti-Virus ClamAV 0.80 rc4 Clam Anti-Virus ClamAV 0.80 rc3 Clam Anti-Virus ClamAV 0.80 rc2 Clam Anti-Virus ClamAV 0.80 rc1 Clam Anti-Virus ClamAV 0.80 Clam Anti-Virus ClamAV 0.70 Clam Anti-Virus ClamAV 0.68 -1 Clam Anti-Virus ClamAV 0.68 Clam Anti-Virus ClamAV 0.67 Clam Anti-Virus ClamAV 0.65 Clam Anti-Virus ClamAV 0.60 Clam Anti-Virus ClamAV 0.54 Clam Anti-Virus ClamAV 0.53 Clam Anti-Virus ClamAV 0.52 Clam Anti-Virus ClamAV 0.51 Cat Computer Services Quick Heal Antivirus AVG AVG Anti-Virus 7.1.308 AVG AVG Anti-Virus 7.0.251 AVG AVG Anti-Virus 7.0 AVG AVG Anti-Virus 6.0.710 Avast! Antivirus Server Edition 4.6.489 Avast! Antivirus Server Edition 4.6.460 Avast! Antivirus Professional Edition 4.6.691 Avast! Antivirus Professional Edition 4.6.665 Avast! Antivirus Professional Edition 4.6 Avast! Antivirus Professional Edition 4.0 Avast! Antivirus Managed Client 4.6.394 Avast! Antivirus Home Edition 4.6.691 Avast! Antivirus Home Edition 4.6.665 Avast! Antivirus Home Edition 4.6 Avast! Antivirus Home Edition 4.0 ArcaBit ArcaVir
Not Vulnerable:

Multiple Vendor Antivirus Products Malformed Archives Scan Evasion Vulnerability

Multiple antivirus products from various vendors are reported prone to a vulnerability that may allow malformed archive files to bypass detection.

This issue arises when an affected application processes a specially altered archive file that contains a fake, misleading MS-DOS executable MZ header.

This issue could result in malicious archives bypassing detection and allowing the contents to be opened by a recipient.

It should be noted that specific information regarding affected packages and versions is currently unavailable. The reporter of this issue used the EICAR test message stored in multiple different malformed archives. It may be possible that some of the reportedly affected packages may actually be immune to this issue.

This BID will be updated as further information is disclosed.

Multiple Vendor Antivirus Products Malformed Archives Scan Evasion Vulnerability

An exploit is not required.

Proof of concept examples are available from the following location:

http://shadock.net/secubox/AVCraftedArchive.html

Multiple Vendor Antivirus Products Malformed Archives Scan Evasion Vulnerability

Solution:
Computer Associates has acknowledged that this issue affects eTrust products.

Softwin has released an advisory to outline vulnerable BitDefender products. The vendor has released updates and users are recommended to install fixes through the regular update function of the applications. Please see the referenced advisory for more information.

Kaspersky has released updates to address this issue in affected products. Kaspersky products can be updated automatically through the signature-update functionality of the applications.

Multiple Vendor Antivirus Products Malformed Archives Scan Evasion Vulnerability

References:

• Malformed Archives Scan Evasion Vulnerability (Softwin)
  
• Multiple Antivirus detection bypass by special crafted archive (SecuBox Labs)
  
• Antivirus detection bypass by special crafted archive. ([email protected])