CVE-2012-1454

Published: Mar 21, 2012Modified: Apr 29, 2026

4.3

Vector

AV:N/AC:M/Au:N/C:N/I:P/A:N

Exploitability: 8.6 / Impact: 2.9

Source: NVD

Description

The ELF file parser in Dr.Web 5.0.2.03300, eSafe 7.0.17.0, McAfee Gateway (formerly Webwasher) 2010.1C, Rising Antivirus 22.83.00.03, Fortinet Antivirus 4.2.254.0, and Panda Antivirus 10.0.2.7 allows remote attackers to bypass malware detection via an ELF file with a modified ei_version field. NOTE: this may later be SPLIT into multiple CVEs if additional information is published showing that the error occurred independently in different ELF parser implementations.

Affected (6)

Products: Aladdin: Esafe · Drweb: Dr.web Antivirus · Fortinet: Fortinet Antivirus · +3 more

Show all products

Aladdin: Esafe · Drweb: Dr.web Antivirus · Fortinet: Fortinet Antivirus · Mcafee: Gateway · Pandasecurity: Panda Antivirus · Rising Global: Rising Antivirus

1 product

1 product

1 product

1 product

1 product

1 product

Configuration A

6 vulnerable

Vulnerable Software	Affected Versions
Aladdin Esafe	Version 7.0.17.0
Drweb Dr.web Antivirus	Version 5.0.2.03300
Fortinet Fortinet Antivirus	Version 4.2.254.0
Mcafee Gateway	Version 2010.1c
Pandasecurity Panda Antivirus	Version 10.0.2.7
Rising Global Rising Antivirus	Version 22.83.00.03

Related CWEs

CWE-264

References (6)

http://osvdb.org/80432

Source: cve@mitre.org

http://www.ieee-security.org/TC/SP2012/program.html

Source: cve@mitre.org

http://www.securityfocus.com/archive/1/522005

Source: cve@mitre.org

http://osvdb.org/80432

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.ieee-security.org/TC/SP2012/program.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.securityfocus.com/archive/1/522005

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.