CVE-2012-1446

中 4.3CVE-2012-1446 · 21/03/2012 公開 · 16/06/2026 更新

パッケージ	影響を受けるバージョン	修正済みバージョン
esafe aladdin	`= 7.0.17.0`	修正版なし
avl sdk antiy	`= 2.0.3.7`	修正版なし
etrust vet antivirus ca	`= 36.1.8511`	修正版なし
quick heal cat	`= 11.00`	修正版なし
fortinet antivirus fortinet	`= 4.2.254.0`	修正版なし
kaspersky anti-virus kaspersky	`= 7.0.0.125`	修正版なし
gateway mcafee	`= 2010.1c`	修正版なし
scan engine mcafee	`= 5.400.0.1158`	修正版なし
norman antivirus & antispyware norman	`= 6.06.12`	修正版なし
panda antivirus pandasecurity	`= 10.0.2.7`	修正版なし
pc tools antivirus pc_tools	`= 7.0.3.5`	修正版なし
rising antivirus rising-global	`= 22.83.00.03`	修正版なし
sophos anti-virus sophos	`= 4.61.0`	修正版なし
endpoint protection symantec	`= 11.0`	修正版なし

概要

The ELF file parser in Quick Heal (aka Cat QuickHeal) 11.00, McAfee Anti-Virus Scanning Engine 5.400.0.1158, AVEngine 20101.3.0.103 in Symantec Endpoint Protection 11, Norman Antivirus 6.06.12, eSafe 7.0.17.0, Kaspersky Anti-Virus 7.0.0.125, McAfee Gateway (formerly Webwasher) 2010.1C, Sophos Anti-Virus 4.61.0, CA eTrust Vet Antivirus 36.1.8511, Antiy Labs AVL SDK 2.0.3.7, PC Tools AntiVirus 7.0.3.5, Rising Antivirus 22.83.00.03, Fortinet Antivirus 4.2.254.0, and Panda Antivirus 10.0.2.7 allows remote attackers to bypass malware detection via an ELF file with a modified encoding field. NOTE: this may later be SPLIT into multiple CVEs if additional information is published showing that the error occurred independently in different ELF parser implementations.