Thorsten Holz

The issue allows remote attackers to bypass malware detection via a POSIX TAR file with an initial 7fELF character sequence. This affects the TAR file parser in various antivirus software products.

The issue allows remote attackers to bypass malware detection via a POSIX TAR file with an initial x42x5Ax68 character sequence.

The issue allows remote attackers to bypass malware detection. This is achieved through a POSIX TAR file containing a specific character sequence (`57696E5A6970`) at a certain location in the file.

The ELF file parser in the affected software allows remote attackers to bypass malware detection via an ELF file with a ustar character sequence at a certain location.

The Microsoft EXE file parser in various security products allows remote attackers to bypass malware detection via an EXE file with a specific character sequence at a certain location.

The issue concerns a bypass of malware detection in the Microsoft Office file parser. It can be exploited by remote attackers using a specifically crafted Office file that contains a `x50x4Bx53x70x58` character sequence at a certain location.

The issue allows remote attackers to bypass malware detection in the Microsoft Office file parser. This is achieved by using an Office file with a ustar character sequence at a specific location.

The issue allows remote attackers to bypass malware detection. This is achieved via a CAB file with a modified `reserved1` field.

The issue allows remote attackers to bypass malware detection by using a .tar.gz file with stray bytes at the end. This is related to the Gzip file parser in the affected software.

The Gzip file parser in the listed antivirus software allows remote attackers to bypass malware detection via a .tar.gz file with multiple compressed streams.

The issue allows remote attackers to bypass malware detection via a ZIP file containing an invalid block of data at the beginning. This is related to the ZIP file parser in the affected software.

The ELF file parser in the affected software allows remote attackers to bypass malware detection via an ELF file with a modified endianness field.