NVD

Id
48634  
Name
CVE-2009-1348  
Description
The AV engine before DAT 5600 in McAfee VirusScan, Total Protection, Internet Security, SecurityShield for Microsoft ISA Server, Security for Microsoft Sharepoint, Security for Email Servers, Email Gateway, and Active Virus Defense allows remote attackers to bypass virus detection via (1) an invalid Headflags field in a malformed RAR archive, (2) an invalid Packsize field in a malformed RAR archive, or (3) an invalid Filelength field in a malformed ZIP archive.  
Reject
 
CVSS Version
2  
CVSS Score
7.6  
Severity
High  
CVSS Base Score
7.6  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
4.9  
CVSS Vector
(AV:N/AC:H/Au:N/C:C/I:C/A:C)  
Pub Date
2017-01-07  
Published
2009-04-30  
Modified Date
2009-05-19  
Seq
2009-1348  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
245481 48634 CVE-2009-1348 http://blog.zoller.lu/2009/04/mcafee-multiple-bypassesevasions-ziprar.html  View
245482 48634 CVE-2009-1348 20090501 [TZO-18-2009] Mcafee multiple evasions/bypasses (RAR, ZIP)  View
245483 48634 CVE-2009-1348 34780  View
245484 48634 CVE-2009-1348 https://kc.mcafee.com/corporate/index?page=content&id=SB10001&actp=LIST_RECENT  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
43580 JVNDB-2009-004587 McAfee VirusScan などの製品で使用される AV エンジンにおける検出を回避される脆弱性 McAfee VirusScan、Total Protection、Internet Security、SecurityShield for Microsoft ISA Server、Security for Microsoft Sharepoint、Security for Email Servers、Email Gateway、および Active Virus Defense の AV エンジンには、検出を回避される脆弱性が存在します。 CVE-2009-1348 38779 CVE-2009-1348 48634 7.6 http://jvndb.jvn.jp/ja/contents/2009/JVNDB-2009-004587.html 2009-04-30 2012-09-25 View