CVE-2012-1440

Aladdin Esafe - Access Control

Title source: rule
STIX 2.1

Description

The ELF file parser in Norman Antivirus 6.06.12, eSafe 7.0.17.0, CA eTrust Vet Antivirus 36.1.8511, Fortinet Antivirus 4.2.254.0, and Panda Antivirus 10.0.2.7 allows remote attackers to bypass malware detection via an ELF file with a modified identsize field. NOTE: this may later be SPLIT into multiple CVEs if additional information is published showing that the error occurred independently in different ELF parser implementations.

References (2)

Core 2
Core References
Third Party Advisory, VDB Entry mailing-list x_refsource_bugtraq
http://www.securityfocus.com/archive/1/522005
Various Sources x_refsource_misc
http://www.ieee-security.org/TC/SP2012/program.html

Scores

EPSS 0.0034
EPSS Percentile 56.6%

Details

CWE
CWE-264
Status published
Products (5)
aladdin/esafe 7.0.17.0
ca/etrust_vet_antivirus 36.1.8511
fortinet/fortinet_antivirus 4.2.254.0
norman/norman_antivirus_\&_antispyware 6.06.12
pandasecurity/panda_antivirus 10.0.2.7
Published Mar 21, 2012
Tracked Since Feb 18, 2026