NetSight
medium4.3

CVE-2012-1440

The ELF file parser in Norman Antivirus 6.06.12, eSafe 7.0.17.0, CA eTrust Vet Antivirus 36.1.8511, Fortinet Antivirus 4.2.254.0, and Panda Antivirus 10.0.2.7 …

Impact

The ELF file parser in Norman Antivirus 6.06.12, eSafe 7.0.17.0, CA eTrust Vet Antivirus 36.1.8511, Fortinet Antivirus 4.2.254.0, and Panda Antivirus 10.0.2.7 allows remote attackers to bypass malware detection via an ELF file with a modified identsize field. NOTE: this may later be SPLIT into multiple CVEs if additional information is published showing that the error occurred independently in different ELF parser implementations.

Affected products

VendorProductAffected versions
AladdinEsafe
Version 7.0.17.0
CaEtrust Vet Antivirus
Version 36.1.8511
FortinetFortinet Antivirus
Version 4.2.254.0
NormanNorman Antivirus \& Antispyware
Version 6.06.12
PandasecurityPanda Antivirus
Version 10.0.2.7

Weakness classification

References