NetSight
IP …
high7.6

CVE-2009-1348

The AV engine before DAT 5600 in McAfee VirusScan, Total Protection, Internet Security, SecurityShield for Microsoft ISA Server, Security for Microsoft Sharepo…

Impact

The AV engine before DAT 5600 in McAfee VirusScan, Total Protection, Internet Security, SecurityShield for Microsoft ISA Server, Security for Microsoft Sharepoint, Security for Email Servers, Email Gateway, and Active Virus Defense allows remote attackers to bypass virus detection via (1) an invalid Headflags field in a malformed RAR archive, (2) an invalid Packsize field in a malformed RAR archive, or (3) an invalid Filelength field in a malformed ZIP archive.

Affected products

VendorProductAffected versions
McafeeActive Virus Defense
All versions
McafeeActive Virusscan
All versions
McafeeEmail Gateway
All versions
McafeeInternet Security Suite
All versions
Versions 2004, 2005, 2006, 2009
McafeeSecurityshield For Email Servers
All versions
McafeeSecurityshield For Microsoft Isa Server
All versions
McafeeSecurityshield For Microsoft Sharepoint
All versions
McafeeTotal Protection
Version 2009
McafeeTotal Protection For Endpoint
All versions
McafeeVirusscan Commandline
All versions
McafeeVirusscan Enterprise
All versions
McafeeVirusscan Plus
Version 2009

Weakness classification

CWE-20

References