Unscored severity · published Oct 14, 2005
CVE-2005-3228
Multiple interpretation error in unspecified versions of Ikarus AntiVirus allows remote attackers to bypass virus detection via a malicious executable in a specially crafted RAR…
–
CVSS
2%
EPSS
No
On KEV
Description
Multiple interpretation error in unspecified versions of Ikarus AntiVirus allows remote attackers to bypass virus detection via a malicious executable in a specially crafted RAR file with malformed central and local headers, which can still be opened by products such as Winrar and PowerZip, even though they are rejected as corrupted by Winzip and BitZipper.
Exploitation
Is it being used?
Exploit prediction (EPSS)2.0% · higher than 81% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
IA
Ikarus Antivirus · Ikarus
All versions, or not specified · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2005-3228
CVE.org
https://www.cve.org/CVERecord?id=CVE-2005-3228
marc.info
http://marc.info/?l=bugtraq&m=112879611919750&w=2
shadock.net
http://shadock.net/secubox/AVCraftedArchive.html
More from Ikarus Antivirus
–
CVE-2008-5532
Ikarus Virus Utilities T3.1.1.45.0 and possibly T3.1.1.34.0, when Internet Explorer 6 or 7 is used, allows remote attackers to bypass detection of malware in an HTML document by…
–
CVE-2005-3375
Multiple interpretation error in Ikarus demo version allows remote attackers to bypass virus scanning via a file such as BAT, HTML, and EML with an "MZ" magic byte sequence which…