Unscored severity · published May 2, 2005
CVE-2005-0643
Buffer overflow in McAfee Scan Engine 4320 with DAT version before 4357 allows remote attackers to execute arbitrary code via crafted LHA files
–
CVSS
10.4%
EPSS
No
On KEV
Description
Buffer overflow in McAfee Scan Engine 4320 with DAT version before 4357 allows remote attackers to execute arbitrary code via crafted LHA files.
Exploitation
Is it being used?
Exploit prediction (EPSS)10.4% · higher than 96% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
AE
Antivirus Engine · Mcafee
4.3.20 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2005-0643
CVE.org
https://www.cve.org/CVERecord?id=CVE-2005-0643
Vendor Advisory
http://images.mcafee.com/misc/McAfee_Security_Bulletin_05-march-17.pdf
secunia.com
http://secunia.com/advisories/14628
Exploit
http://www.securityfocus.com/bid/10243
More from Antivirus Engine
–
CVE-2005-0644
Buffer overflow in McAfee Scan Engine 4320 with DAT version before 4436 allows remote attackers to execute arbitrary code via a malformed LHA file with a type 2 header file name…
–
CVE-2004-0937
Sophos Anti-Virus before 3.87.0, and Sophos Anti-Virus for Windows 95, 98, and Me before 3.88.0, allows remote attackers to bypass antivirus protection via a compressed file with…
–
CVE-2004-0934
Kaspersky 3.x to 4.x allows remote attackers to bypass antivirus protection via a compressed file with both local and global headers set to zero, which does not prevent the…
–
CVE-2004-0936
RAV antivirus allows remote attackers to bypass antivirus protection via a compressed file with both local and global headers set to zero, which does not prevent the compressed…
–
CVE-2004-0935
Eset Anti-Virus before 1.020 (16th September 2004) allows remote attackers to bypass antivirus protection via a compressed file with both local and global headers set to zero,…