CVE-2012-1444

The ELF file parser in eSafe 7.0.17.0, Prevx 3.0, Fortinet Antivirus 4.2.254.0, and Panda Antivirus 10.0.2.7 allows remote attackers to bypass malware detection via an ELF file with a modified abiversion field. NOTE: this may later be SPLIT into multiple CVEs if additional information is published showing that the error occurred independently in different ELF parser implementations.

Score

CVSS 2.0 4.3 Medium

Status

Modified - cve@mitre.org

Published

2012-03-21

Last modified

2024-08-06

Weaknesses

CWE-264

Affected products

• Esafe (Aladdin)
• Fortinet Antivirus (Fortinet)
• Panda Antivirus (Pandasecurity)
• Prevx (Prevx)

References

• http://osvdb.org/80429
• http://www.ieee-security.org/TC/SP2012/program.html
• http://www.securityfocus.com/archive/1/522005
• http://www.securityfocus.com/bid/52604