CVE-2012-1431
Severity CVSS v4.0:
Pending analysis
Type:
CWE-264
Permissions, Privileges, and Access Control
Publication date:
21/03/2012
Last modified:
11/04/2025
Description
The ELF file parser in Bitdefender 7.2, Command Antivirus 5.2.11.5, Comodo Antivirus 7424, eSafe 7.0.17.0, F-Prot Antivirus 4.6.2.117, F-Secure Anti-Virus 9.0.16160.0, McAfee Gateway (formerly Webwasher) 2010.1C, nProtect Anti-Virus 2011-01-17.01, Sophos Anti-Virus 4.61.0, and Rising Antivirus 22.83.00.03 allows remote attackers to bypass malware detection via an ELF file with a \4a\46\49\46 character sequence at a certain location. NOTE: this may later be SPLIT into multiple CVEs if additional information is published showing that the error occurred independently in different ELF parser implementations.
Impact
Base Score 2.0
4.30
Severity 2.0
MEDIUM
Vulnerable products and versions
| CPE | From | Up to |
|---|---|---|
| cpe:2.3:a:aladdin:esafe:7.0.17.0:*:*:*:*:*:*:* | ||
| cpe:2.3:a:authentium:command_antivirus:5.2.11.5:*:*:*:*:*:*:* | ||
| cpe:2.3:a:bitdefender:bitdefender:7.2:*:*:*:*:*:*:* | ||
| cpe:2.3:a:comodo:comodo_antivirus:7424:*:*:*:*:*:*:* | ||
| cpe:2.3:a:f-prot:f-prot_antivirus:4.6.2.117:*:*:*:*:*:*:* | ||
| cpe:2.3:a:f-secure:f-secure_anti-virus:9.0.16160.0:*:*:*:*:*:*:* | ||
| cpe:2.3:a:mcafee:gateway:2010.1c:*:*:*:*:*:*:* | ||
| cpe:2.3:a:nprotect:nprotect_antivirus:2011-01-17.01:*:*:*:*:*:*:* | ||
| cpe:2.3:a:rising-global:rising_antivirus:22.83.00.03:*:*:*:*:*:*:* | ||
| cpe:2.3:a:sophos:sophos_anti-virus:4.61.0:*:*:*:*:*:*:* |
To consult the complete list of CPE names with products and versions, see this page