Login Request a demo
Unscored severity · published Mar 21, 2012
CVE-2012-1446
The ELF file parser in Quick Heal (aka Cat QuickHeal) 11.00, McAfee Anti-Virus Scanning Engine 5.400.0.1158, AVEngine 20101.3.0.103 in Symantec Endpoint Protection 11, Norman…
–
CVSS
99.7%
EPSS
No
On KEV
Description
The ELF file parser in Quick Heal (aka Cat QuickHeal) 11.00, McAfee Anti-Virus Scanning Engine 5.400.0.1158, AVEngine 20101.3.0.103 in Symantec Endpoint Protection 11, Norman Antivirus 6.06.12, eSafe 7.0.17.0, Kaspersky Anti-Virus 7.0.0.125, McAfee Gateway (formerly Webwasher) 2010.1C, Sophos Anti-Virus 4.61.0, CA eTrust Vet Antivirus 36.1.8511, Antiy Labs AVL SDK 2.0.3.7, PC Tools AntiVirus 7.0.3.5, Rising Antivirus 22.83.00.03, Fortinet Antivirus 4.2.254.0, and Panda Antivirus 10.0.2.7 allows remote attackers to bypass malware detection via an ELF file with a modified encoding field. NOTE: this may later be SPLIT into multiple CVEs if additional information is published showing that the error occurred independently in different ELF parser implementations.
Exploitation
Is it being used?
Exploit prediction (EPSS)99.7% · higher than 100% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
AS
Avl Sdk · Antiy
2.0.3.7 · source: NVD
EP
Endpoint Protection · Symantec
11.0 · source: NVD
ES
Esafe · Aladdin
7.0.17.0 · source: NVD
EV
Etrust Vet Antivirus · CA
36.1.8511 · source: NVD
FA
Fortinet Antivirus · Fortinet
4.2.254.0 · source: NVD
GA
Gateway · Mcafee
2010.1c · source: NVD
KA
Kaspersky Anti-virus · Kaspersky
7.0.0.125 · source: NVD
NA
Norman Antivirus & Antispyware · Norman
6.06.12 · source: NVD
PT
PC Tools Antivirus · PC Tools
7.0.3.5 · source: NVD
PA
Panda Antivirus · Pandasecurity
10.0.2.7 · source: NVD
QH
Quick Heal · Cat
11.00 · source: NVD
RA
Rising Antivirus · Rising-global
22.83.00.03 · source: NVD
Affected product
ES
Esafe
Aladdin
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2012-1446
CVE.org
https://www.cve.org/CVERecord?id=CVE-2012-1446
osvdb.org
http://osvdb.org/80426
osvdb.org
http://osvdb.org/80427
osvdb.org
http://osvdb.org/80428
osvdb.org
http://osvdb.org/80430
osvdb.org
http://osvdb.org/80431
www.ieee-security.org
http://www.ieee-security.org/TC/SP2012/program.html
More from Esafe
–
CVE-2012-1463
The ELF file parser in AhnLab V3 Internet Security 2011.01.18.00, Bitdefender 7.2, Quick Heal (aka Cat QuickHeal) 11.00, Command Antivirus 5.2.11.5, Comodo Antivirus 7424, eSafe…
–
CVE-2012-1462
The ZIP file parser in AhnLab V3 Internet Security 2011.01.18.00, AVG Anti-Virus 10.0.0.1190, Quick Heal (aka Cat QuickHeal) 11.00, Emsisoft Anti-Malware 5.1.0.1, eSafe 7.0.17.0,…
–
CVE-2012-1460
The Gzip file parser in Antiy Labs AVL SDK 2.0.3.7, Quick Heal (aka Cat QuickHeal) 11.00, Command Antivirus 5.2.11.5, eSafe 7.0.17.0, F-Prot Antivirus 4.6.2.117, Jiangmin…
–
CVE-2012-1457
The TAR file parser in Avira AntiVir 7.11.1.163, Antiy Labs AVL SDK 2.0.3.7, avast! Antivirus 4.8.1351.0 and 5.0.677.0, AVG Anti-Virus 10.0.0.1190, Bitdefender 7.2, Quick Heal…
–
CVE-2012-1456
The TAR file parser in AVG Anti-Virus 10.0.0.1190, Quick Heal (aka Cat QuickHeal) 11.00, Comodo Antivirus 7424, Emsisoft Anti-Malware 5.1.0.1, eSafe 7.0.17.0, F-Prot Antivirus…