McAfee Products TAR and PDF Files Scan Evasion Vulnerabilities
BID:36848
Info
McAfee Products TAR and PDF Files Scan Evasion Vulnerabilities
| Bugtraq ID: | 36848 |
| Class: | Design Error |
| CVE: |
CVE-2009-1348 |
| Remote: | Yes |
| Local: | No |
| Published: | Oct 27 2009 12:00AM |
| Updated: | Mar 19 2015 09:04AM |
| Credit: | Thierry Zoller |
| Vulnerable: |
McAfee VirusScan Plus 2007 0 McAfee VirusScan Enterprise 8.0 i patch 15 McAfee VirusScan Enterprise 8.0 i patch 12 McAfee VirusScan Enterprise 8.0 i patch 11 McAfee VirusScan Enterprise 8.0 i McAfee VirusScan Enterprise 8.0 McAfee VirusScan Enterprise 7.1 McAfee VirusScan Enterprise 0 McAfee VirusScan 2006 McAfee VirusScan 2005 McAfee VirusScan 2004 McAfee Virex 7.7 McAfee Virex McAfee Total Protection 2007 0 McAfee PortalShield for Microsoft SharePoint McAfee NetShield for Netware 4 McAfee NetShield for Netware McAfee LinuxShield 1 McAfee LinuxShield McAfee GroupShield for Lotus Domino on Windows 5 McAfee GroupShield for Lotus Domino on AIX 5 McAfee GroupShield for Lotus Domino 7 McAfee GroupShield for Lotus Domino McAfee GroupShield for Exchange 5.5 5.0.964.1 McAfee GroupShield for Exchange 5.5 5.0.902.1 McAfee GroupShield for Exchange 5.5 5.0.1007.1 McAfee GroupShield for Exchange 2000 5 McAfee GroupShield for Exchange 6.0 McAfee GroupShield for Exchange 5.5 McAfee GroupShield for Exchange 6.0.616.102 McAfee GroupShield for Exchange 4 |
| Not Vulnerable: | |
Discussion
McAfee Products TAR and PDF Files Scan Evasion Vulnerabilities
Multiple McAfee products are prone to vulnerabilities that may allow certain files to bypass the scan engine.
Successful exploits will allow attackers to distribute files containing malicious code that the antivirus application on a gateway device will fail to detect.
Multiple McAfee products are prone to vulnerabilities that may allow certain files to bypass the scan engine.
Successful exploits will allow attackers to distribute files containing malicious code that the antivirus application on a gateway device will fail to detect.
Exploit / POC
McAfee Products TAR and PDF Files Scan Evasion Vulnerabilities
The researcher who reported these issues has developed proofs of concept, but they are not publicly available.
The researcher who reported these issues has developed proofs of concept, but they are not publicly available.
Solution / Fix
McAfee Products TAR and PDF Files Scan Evasion Vulnerabilities
Solution:
Updates are available through DAT files. Please see the references for details.
Solution:
Updates are available through DAT files. Please see the references for details.
References
McAfee Products TAR and PDF Files Scan Evasion Vulnerabilities
References:
References: