Vulnerability CVE-2012-1450

Vulnerability CVE-2012-1450

Published: 2012-03-21

Description:

The CAB file parser in Emsisoft Anti-Malware 5.1.0.1, Sophos Anti-Virus 4.61.0, and Ikarus Virus Utilities T3 Command Line Scanner 1.1.97.0 allows remote attackers to bypass malware detection via a CAB file with a modified reserved3 field. NOTE: this may later be SPLIT into multiple CVEs if additional information is published showing that the error occurred independently in different CAB parser implementations.

Type:

CWE-264

(Permissions, Privileges, and Access Controls)

CVSS2 => (AV:N/AC:M/Au:N/C:N/I:P/A:N)

CVSS Base Score	Impact Subscore	Exploitability Subscore
4.3/10	2.9/10	8.6/10

Exploit range	Attack complexity	Authentication
Remote	Medium	No required
Confidentiality impact	Integrity impact	Availability impact
None	Partial	None

Affected software
Sophos -> Sophos anti-virus
Ikarus -> Ikarus virus utilities t3 command line scanner
Emsisoft -> Anti-malware

References:

http://www.securityfocus.com/archive/1/522005

http://www.ieee-security.org/TC/SP2012/program.html

Copyright 2024, cxsecurity.com