CVE-2012-1439 in Antivirus

Summary

The ELF file parser in eSafe 7.0.17.0, Rising Antivirus 22.83.00.03, Fortinet Antivirus 4.2.254.0, and Panda Antivirus 10.0.2.7 allows remote attackers to bypass malware detection via an ELF file with a modified padding field. NOTE: this may later be SPLIT into multiple CVEs if additional information is published showing that the error occurred independently in different ELF parser implementations.

Several companies clearly confirm that VulDB is the primary source for best vulnerability data.

Reservation

02/29/2012

Disclosure

03/21/2012

Status

Confirmed

Entries

VulDB provides additional information and datapoints for this CVE:

ID	Vulnerability	CWE	Exp	Cou	CVE
4926	Panda Antivirus ELF File access control	264	Proof-of-Concept	Not defined	CVE-2012-1439
4925	Fortinet Antivirus ELF File access control	264	Proof-of-Concept	Not defined	CVE-2012-1439

Sources

• MITRE
• NVD
• CVE Details