NVD

Id
43360  
Name
CVE-2012-1446  
Description
The ELF file parser in Quick Heal (aka Cat QuickHeal) 11.00, McAfee Anti-Virus Scanning Engine 5.400.0.1158, AVEngine 20101.3.0.103 in Symantec Endpoint Protection 11, Norman Antivirus 6.06.12, eSafe 7.0.17.0, Kaspersky Anti-Virus 7.0.0.125, McAfee Gateway (formerly Webwasher) 2010.1C, Sophos Anti-Virus 4.61.0, CA eTrust Vet Antivirus 36.1.8511, Antiy Labs AVL SDK 2.0.3.7, PC Tools AntiVirus 7.0.3.5, Rising Antivirus 22.83.00.03, Fortinet Antivirus 4.2.254.0, and Panda Antivirus 10.0.2.7 allows remote attackers to bypass malware detection via an ELF file with a modified encoding field. NOTE: this may later be SPLIT into multiple CVEs if additional information is published showing that the error occurred independently in different ELF parser implementations.  
Reject
 
CVSS Version
2  
CVSS Score
4.3  
Severity
Medium  
CVSS Base Score
4.3  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:N/I:P/A:N)  
Pub Date
2017-01-19  
Published
2012-03-21  
Modified Date
2012-07-27  
Seq
2012-1446  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
217936 43360 CVE-2012-1446 http://www.ieee-security.org/TC/SP2012/program.html  View
217937 43360 CVE-2012-1446 20120319 Evasion attacks expoliting file-parsing vulnerabilities in antivirus products  View
217938 43360 CVE-2012-1446 52600  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
26190 JVNDB-2012-001897 複数の製品の ELF ファイルパーサにおけるマルウェア検知を回避される脆弱性 複数の製品の ELF ファイルパーサには、マルウェア検知を回避される脆弱性が存在します。 CVE-2012-1446 54684 CVE-2012-1446 43360 4.3 http://jvndb.jvn.jp/ja/contents/2012/JVNDB-2012-001897.html 2012-03-21 2012-03-26 View