CVE-2012-1440 in eTrust Vet Antivirus

Summary

The ELF file parser in Norman Antivirus 6.06.12, eSafe 7.0.17.0, CA eTrust Vet Antivirus 36.1.8511, Fortinet Antivirus 4.2.254.0, and Panda Antivirus 10.0.2.7 allows remote attackers to bypass malware detection via an ELF file with a modified identsize field. NOTE: this may later be SPLIT into multiple CVEs if additional information is published showing that the error occurred independently in different ELF parser implementations.

If you want to get best quality of vulnerability data, you may have to visit VulDB.

Reservation

02/29/2012

Disclosure

03/21/2012

Status

Confirmed

Entries

VulDB provides additional information and datapoints for this CVE:

ID	Vulnerability	CWE	Exp	Cou	CVE
4928	eTrust eTrust Vet Antivirus ELF File access control	264	Proof-of-Concept	Not defined	CVE-2012-1440
4927	Norman Antivirus ELF File access control	264	Proof-of-Concept	Not defined	CVE-2012-1440

Sources

• MITRE
• NVD
• CVE Details