CVE-2009-1348

Published: Apr 30, 2009Modified: Apr 23, 2026

7.6

Vector

AV:N/AC:H/Au:N/C:C/I:C/A:C

Exploitability: 4.9 / Impact: 10.0

Source: NVD

Description

The AV engine before DAT 5600 in McAfee VirusScan, Total Protection, Internet Security, SecurityShield for Microsoft ISA Server, Security for Microsoft Sharepoint, Security for Email Servers, Email Gateway, and Active Virus Defense allows remote attackers to bypass virus detection via (1) an invalid Headflags field in a malformed RAR archive, (2) an invalid Packsize field in a malformed RAR archive, or (3) an invalid Filelength field in a malformed ZIP archive.

Affected (20)

Products: Mcafee: Active Virus Defense, Active Virusscan, Email Gateway, Internet Security Suite, Securityshield For Email Servers, Securityshield For Microsoft Isa Server, Securityshield For Microsoft Sharepoint, Total Protection, Total Protection For Endpoint, Virusscan Commandline, Virusscan Enterprise, Virusscan Plus, Virusscan Usb

13 products

Internet Security Suite

Securityshield For Email Servers

Securityshield For Microsoft Isa Server

Securityshield For Microsoft Sharepoint

Total Protection

Total Protection For Endpoint

Virusscan Commandline

Virusscan Enterprise

Virusscan Plus

Virusscan Usb

Configuration A

20 vulnerable

Vulnerable Software	Affected Versions
Mcafee Active Virus Defense	All versions
Mcafee Active Virusscan	All versions
Mcafee Email Gateway	All versions
Mcafee Internet Security Suite	All versions
Mcafee Internet Security Suite	Version 2004
Mcafee Internet Security Suite	Version 2005
Mcafee Internet Security Suite	Version 2006
Mcafee Internet Security Suite	Version 2009
Mcafee Securityshield For Email Servers	All versions
Mcafee Securityshield For Microsoft Isa Server	All versions
Mcafee Securityshield For Microsoft Sharepoint	All versions
Mcafee Total Protection	Version 2009
Mcafee Total Protection For Endpoint	All versions
Mcafee Virusscan Commandline	All versions
Mcafee Virusscan Enterprise	All versions
Mcafee Virusscan Enterprise	All versions
Mcafee Virusscan Enterprise	All versions
Mcafee Virusscan Enterprise	All versions
Mcafee Virusscan Plus	Version 2009
Mcafee Virusscan Usb	All versions