PT-2012-3288

CVE-2012-1463

·

Published

2012-03-21

·

Updated

2017-08-29

Description by

CVSS 2.0
4.3
Medium
MetricsAV:N/AC:M/Au:N/C:N/I:P/A:N
Name of the Vulnerable Software and Affected Versions AhnLab V3 Internet Security version 2011.01.18.00 Bitdefender version 7.2 Quick Heal version 11.00 Command Antivirus version 5.2.11.5 Comodo Antivirus version 7424 eSafe version 7.0.17.0 F-Prot Antivirus version 4.6.2.117 F-Secure Anti-Virus version 9.0.16160.0 McAfee Anti-Virus Scanning Engine version 5.400.0.1158 Norman Antivirus version 6.06.12 nProtect Anti-Virus version 2011-01-17.01 Panda Antivirus version 10.0.2.7
Description The ELF file parser in the affected software allows remote attackers to bypass malware detection via an ELF file with a modified endianness field.
Recommendations For AhnLab V3 Internet Security version 2011.01.18.00, update to a newer version that fixes the ELF file parser issue. For Bitdefender version 7.2, update to a newer version that fixes the ELF file parser issue. For Quick Heal version 11.00, update to a newer version that fixes the ELF file parser issue. For Command Antivirus version 5.2.11.5, update to a newer version that fixes the ELF file parser issue. For Comodo Antivirus version 7424, update to a newer version that fixes the ELF file parser issue. For eSafe version 7.0.17.0, update to a newer version that fixes the ELF file parser issue. For F-Prot Antivirus version 4.6.2.117, update to a newer version that fixes the ELF file parser issue. For F-Secure Anti-Virus version 9.0.16160.0, update to a newer version that fixes the ELF file parser issue. For McAfee Anti-Virus Scanning Engine version 5.400.0.1158, update to a newer version that fixes the ELF file parser issue. For Norman Antivirus version 6.06.12, update to a newer version that fixes the ELF file parser issue. For nProtect Anti-Virus version 2011-01-17.01, update to a newer version that fixes the ELF file parser issue. For Panda Antivirus version 10.0.2.7, update to a newer version that fixes the ELF file parser issue.
Exploitability
Fix
Researchers
Vendors
Affected products
Weakness enumeration
Related identifiers
Found an issue in the description? Have something to add? Feel free to write us 👾