Skip to content

CVE-2012-1446 The ELF file parser in Quick Heal (aka Cat QuickHeal) 11.00, McAfee Anti-Virus Scanning Engine 5.400.0.1158, AVEngine 20101.3.0.103 in Symantec Endpoint Protection 11, Norman Antivirus 6.06.12, eSafe....

MediumCVSS 4.3 EPSS 99.6%
Published
Updated
Exploit status
No public exploit known
Sign in for asset impact Search another CVE

Description

The ELF file parser in Quick Heal (aka Cat QuickHeal) 11.00, McAfee Anti-Virus Scanning Engine 5.400.0.1158, AVEngine 20101.3.0.103 in Symantec Endpoint Protection 11, Norman Antivirus 6.06.12, eSafe 7.0.17.0, Kaspersky Anti-Virus 7.0.0.125, McAfee Gateway (formerly Webwasher) 2010.1C, Sophos Anti-Virus 4.61.0, CA eTrust Vet Antivirus 36.1.8511, Antiy Labs AVL SDK 2.0.3.7, PC Tools AntiVirus 7.0.3.5, Rising Antivirus 22.83.00.03, Fortinet Antivirus 4.2.254.0, and Panda Antivirus 10.0.2.7 allows remote attackers to bypass malware detection via an ELF file with a modified encoding field. NOTE: this may later be SPLIT into multiple CVEs if additional information is published showing that the error occurred independently in different ELF parser implementations.

Affected products

ProductAffected versionsFixed in
aladdin esafe = 7.0.17.0 No fix listed
antiy avl sdk = 2.0.3.7 No fix listed
ca etrust vet antivirus = 36.1.8511 No fix listed
cat quick heal = 11.00 No fix listed
fortinet antivirus = 4.2.254.0 No fix listed
kaspersky anti-virus = 7.0.0.125 No fix listed
mcafee gateway = 2010.1c No fix listed
mcafee scan engine = 5.400.0.1158 No fix listed
norman antivirus antispyware = 6.06.12 No fix listed
pandasecurity panda antivirus = 10.0.2.7 No fix listed
pc tools antivirus = 7.0.3.5 No fix listed
rising-global rising antivirus = 22.83.00.03 No fix listed
sophos anti-virus = 4.61.0 No fix listed
symantec endpoint protection = 11.0 No fix listed

References