The ELF file parser in Fortinet Antivirus 4.2.254.0, eSafe 7.0.17.0, Dr.Web 5.0.2.03300, and Panda Antivirus 10.0.2.7 allows remote attackers to bypass malware detection via an ELF file with a modified e_version field. NOTE: this may later be SPLIT into multiple CVEs if additional information is published showing that the error occurred independently in different ELF parser implementations.
Affected Software
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Esafe | Aladdin | 7.0.17.0 (including) | 7.0.17.0 (including) |
| Dr.web_antivirus | Drweb | 5.0.2.03300 (including) | 5.0.2.03300 (including) |
| Fortinet_antivirus | Fortinet | 4.2.254.0 (including) | 4.2.254.0 (including) |
| Panda_antivirus | Pandasecurity | 10.0.2.7 (including) | 10.0.2.7 (including) |
References
- http://osvdb.org/80432
- http://www.ieee-security.org/TC/SP2012/program.html
- http://www.securityfocus.com/archive/1/522005
- http://www.securityfocus.com/bid/52601
- http://osvdb.org/80432
- http://www.ieee-security.org/TC/SP2012/program.html
- http://www.securityfocus.com/archive/1/522005
- http://www.securityfocus.com/bid/52601