{"resultsPerPage":17,"startIndex":0,"totalResults":17,"format":"NVD_CVE","version":"2.0","timestamp":"2026-09-24T14:48:51.760","vulnerabilities":[{"cve":{"id":"CVE-2005-2986","sourceIdentifier":"cve@mitre.org","published":"2005-09-20T00:03:00.000","lastModified":"2026-06-16T22:16:02.193","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"The v3flt2k.sys driver in AhnLab V3Pro 2004 Build 6.0.0.383, V3 VirusBlock 2005 Build 6.0.0.383, V3Net for Windows Server 6.0 Build 6.0.0.383 does not properly validate the source of the DeviceIoControl commands, which allows remote attackers to gain privileges."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","baseScore":7.5,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL"},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ahnlab:v3_virusblock_2005:6.0.0.383:*:*:*:*:*:*:*","matchCriteriaId":"77CA7FD9-0821-4659-A417-D777B30B99F5"},{"vulnerable":true,"criteria":"cpe:2.3:a:ahnlab:v3net:6.0.0.383:*:win_server:*:*:*:*:*","matchCriteriaId":"14FB3E59-C46A-4A06-9394-583ED5A33E46"},{"vulnerable":true,"criteria":"cpe:2.3:a:ahnlab:v3pro_2004:6.0.0.383:*:*:*:*:*:*:*","matchCriteriaId":"2C916FC5-2E7D-434B-BA6F-6BF69667543C"}]}]}],"references":[{"url":"http://info.ahnlab.com/english/advisory/01.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=112680062609377&w=2","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/15674/","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/14847","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/22297","source":"cve@mitre.org"},{"url":"http://info.ahnlab.com/english/advisory/01.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=112680062609377&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/15674/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/14847","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/22297","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2005-3029","sourceIdentifier":"cve@mitre.org","published":"2005-09-21T22:03:00.000","lastModified":"2026-06-16T22:16:07.027","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Stack-based buffer overflow in AhnLab V3Pro 2004 build 6.0.0.383, V3 VirusBlock 2005 build 6.0.0.383, and V3Net for Windows Server 6.0 build 6.0.0.383 allows remote attackers to execute arbitrary code via a long filname in an ACE archive."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","baseScore":7.5,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL"},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ahnlab:v3_virusblock_2005:6.0.0.383:*:*:*:*:*:*:*","matchCriteriaId":"77CA7FD9-0821-4659-A417-D777B30B99F5"},{"vulnerable":true,"criteria":"cpe:2.3:a:ahnlab:v3net:6.0.0.383:*:win_server:*:*:*:*:*","matchCriteriaId":"14FB3E59-C46A-4A06-9394-583ED5A33E46"},{"vulnerable":true,"criteria":"cpe:2.3:a:ahnlab:v3pro_2004:6.0.0.383:*:*:*:*:*:*:*","matchCriteriaId":"2C916FC5-2E7D-434B-BA6F-6BF69667543C"}]}]}],"references":[{"url":"http://info.ahnlab.com/english/advisory/01.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=112680062609377&w=2","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/15674/","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://secunia.com/secunia_research/2005-17/advisory/","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/14844","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://info.ahnlab.com/english/advisory/01.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=112680062609377&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/15674/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://secunia.com/secunia_research/2005-17/advisory/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/14844","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]}]}},{"cve":{"id":"CVE-2005-3030","sourceIdentifier":"cve@mitre.org","published":"2005-09-21T22:03:00.000","lastModified":"2026-06-16T22:16:07.137","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Directory traversal vulnerability in the archive decompression library in AhnLab V3Pro 2004 build 6.0.0.383, V3 VirusBlock 2005 build 6.0.0.383, and V3Net for Windows Server 6.0 build 6.0.0.383 allows remote attackers to write arbitrary files via a .. (dot dot) in the filename in a compressed archive."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:P/A:N","baseScore":5.0,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ahnlab:v3_virusblock_2005:6.0.0.383:*:*:*:*:*:*:*","matchCriteriaId":"77CA7FD9-0821-4659-A417-D777B30B99F5"},{"vulnerable":true,"criteria":"cpe:2.3:a:ahnlab:v3net:6.0.0.383:*:win_server:*:*:*:*:*","matchCriteriaId":"14FB3E59-C46A-4A06-9394-583ED5A33E46"},{"vulnerable":true,"criteria":"cpe:2.3:a:ahnlab:v3pro_2004:6.0.0.383:*:*:*:*:*:*:*","matchCriteriaId":"2C916FC5-2E7D-434B-BA6F-6BF69667543C"}]}]}],"references":[{"url":"http://info.ahnlab.com/english/advisory/01.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=112680062609377&w=2","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/15674/","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://secunia.com/secunia_research/2005-17/advisory/","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/14848","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://info.ahnlab.com/english/advisory/01.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=112680062609377&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/15674/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://secunia.com/secunia_research/2005-17/advisory/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/14848","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]}]}},{"cve":{"id":"CVE-2005-3284","sourceIdentifier":"cve@mitre.org","published":"2005-10-23T10:02:00.000","lastModified":"2026-06-16T22:16:38.877","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple buffer overflows in AhnLab V3 AntiVirus V3Pro 2004 before 6.0.0.488, V3Net for Windows Server 6.0 before 6.0.0.488, and MyV3, with compressed file scanning enabled, allow remote attackers to execute arbitrary code via crafted (1) ALZ, (2) UUE, or (3) XXE archives."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","baseScore":7.5,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL"},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ahnlab:myv3:1.3.11.15:*:*:*:*:*:*:*","matchCriteriaId":"412750A7-B6FC-4A36-8B30-AFDEA73F7226"},{"vulnerable":true,"criteria":"cpe:2.3:a:ahnlab:v3net:6.0.0.457:*:win_server:*:*:*:*:*","matchCriteriaId":"2A6C1BB9-003E-4E75-B10C-DF5D3C59A7C0"},{"vulnerable":true,"criteria":"cpe:2.3:a:ahnlab:v3pro_2004:6.0.0.457:*:*:*:*:*:*:*","matchCriteriaId":"2012E656-26A8-4C2D-BA9F-32075D456DD4"}]}]}],"references":[{"url":"http://global.ahnlab.com/security/security_advisory002.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/16851","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://secunia.com/secunia_research/2005-48/advisory/","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/80","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/19955","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/413260","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/15091","source":"cve@mitre.org"},{"url":"http://global.ahnlab.com/security/security_advisory002.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/16851","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://secunia.com/secunia_research/2005-48/advisory/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/80","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/19955","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/413260","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/15091","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2007-6060","sourceIdentifier":"cve@mitre.org","published":"2007-11-20T20:46:00.000","lastModified":"2026-06-16T22:47:20.803","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"AhnLab Antivirus 3 Internet Security 2008 Platinum appends data to a filename string at a location indicated by the \"Filename length\" field in a ZIP header, which allows remote attackers to cause a denial of service (machine crash) and possibly execute arbitrary code via a ZIP file in which this field's value is larger than the actual number of bytes in the filename."},{"lang":"es","value":"AhnLab Antivirus 3 Internet Security 2008 Platinum añade datos en una cadena de nombre de archivo en una localización indicada por el campo \"Filename length\" en un cabecera ZIP, lo cual permite a atacantes remotos provocar denegación de servicio (caida de máquina) y posiblemente ejecutar código de su elección a través del un archivo ZIP en el cual este valor de campo es mayor que el actual número de bytes en el nombre de archivo."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","baseScore":9.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE"},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ahnlab:v3_internet_security:2008:*:platinum:*:*:*:*:*","matchCriteriaId":"380B5EAC-334D-4DC8-8787-BD8CD8DE81EB"}]}]}],"references":[{"url":"http://global.ahnlab.com/global/notice_view.ESD?fmethod=view&press_seq=803&printNum=2","source":"cve@mitre.org"},{"url":"http://osvdb.org/42352","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/27757","source":"cve@mitre.org"},{"url":"http://securityreason.com/securityalert/3382","source":"cve@mitre.org"},{"url":"http://secway.org/advisory/AD20071116.txt","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/483799/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/26473","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1018977","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2007/3983","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/38514","source":"cve@mitre.org"},{"url":"http://global.ahnlab.com/global/notice_view.ESD?fmethod=view&press_seq=803&printNum=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://osvdb.org/42352","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/27757","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securityreason.com/securityalert/3382","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secway.org/advisory/AD20071116.txt","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/483799/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/26473","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1018977","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2007/3983","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/38514","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-5520","sourceIdentifier":"cve@mitre.org","published":"2008-12-12T18:30:00.217","lastModified":"2026-06-16T23:00:28.200","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"AhnLab V3 2008.12.4.1 and possibly 2008.9.13.0, when Internet Explorer 6 or 7 is used, allows remote attackers to bypass detection of malware in an HTML document by placing an MZ header (aka \"EXE info\") at the beginning, and modifying the filename to have (1) no extension, (2) a .txt extension, or (3) a .jpg extension, as demonstrated by a document containing a CVE-2006-5745 exploit."},{"lang":"es","value":"AhnLab V3 v2008.12.4.1 y posiblemente v2008.9.13.0, cuando se utiliza Internet Explorer 6 o 7, permite a atacantes remotos eludir la detección de malware en un documento HTML colocando una cabecera MZ (alias \"EXE info\") al principio, y modificar el nombre del archivo a (1 ) sin extensión, (2) una extensión. txt, o (3) una extensión .jpg, como lo demuestra un documento que contiene un exploit CVE-2006-5745."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","baseScore":9.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE"},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ahnlab:v3_internet_security:2008.9.13.0:*:*:*:*:*:*:*","matchCriteriaId":"97AAC686-393C-4A3C-BD22-CFC1863D1A46"},{"vulnerable":true,"criteria":"cpe:2.3:a:ahnlab:v3_internet_security:2008.12.4.1:*:*:*:*:*:*:*","matchCriteriaId":"BEAA0318-BF02-4E11-A7BF-C906A0A098D6"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:a:microsoft:internet_explorer:6:*:*:*:*:*:*:*","matchCriteriaId":"693D3C1C-E3E4-49DB-9A13-44ADDFF82507"},{"vulnerable":false,"criteria":"cpe:2.3:a:microsoft:internet_explorer:7:*:*:*:*:*:*:*","matchCriteriaId":"1A33FA7F-BB2A-4C66-B608-72997A2BD1DB"}]}]}],"references":[{"url":"http://securityreason.com/securityalert/4723","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/498995/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/499043/100/0/threaded","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47435","source":"cve@mitre.org"},{"url":"http://securityreason.com/securityalert/4723","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/498995/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/499043/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47435","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2012-1433","sourceIdentifier":"cve@mitre.org","published":"2012-03-21T10:11:47.693","lastModified":"2026-06-16T23:39:31.290","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"The Microsoft EXE file parser in AhnLab V3 Internet Security 2011.01.18.00, Emsisoft Anti-Malware 5.1.0.1, eSafe 7.0.17.0, Ikarus Virus Utilities T3 Command Line Scanner 1.1.97.0, and Panda Antivirus 10.0.2.7 allows remote attackers to bypass malware detection via an EXE file with a \\4a\\46\\49\\46 character sequence at a certain location. NOTE: this may later be SPLIT into multiple CVEs if additional information is published showing that the error occurred independently in different EXE parser implementations."},{"lang":"es","value":"El analizador de archivos EXE Microsoft en AhnLab V3 Internet Security 2011.01.18.00, Emsisoft Anti-Malware 5.1.0.1, eSafe 7.0.17.0, Ikarus Virus Utilities T3 Command Line Scanner 1.1.97.0, y Panda Antivirus 10.0.2.7 permite a atacantes remotos evitar de malware detección a través de un archivo EXE con una secuencia de caracteres \\4a\\46\\49\\46 en un lugar determinado. NOTA: esto más adelante se puede dividir en varios CVEs si la información adicional que se publica muestra que el error se produjo de forma independiente en diferentes implementaciones del analizador EXE."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ahnlab:v3_internet_security:2011.01.18.00:*:*:*:*:*:*:*","matchCriteriaId":"0B91745E-EA83-4C70-BF2D-45A3678FA157"},{"vulnerable":true,"criteria":"cpe:2.3:a:aladdin:esafe:7.0.17.0:*:*:*:*:*:*:*","matchCriteriaId":"5C6590DF-9164-4A76-ADEE-9110C5E3588E"},{"vulnerable":true,"criteria":"cpe:2.3:a:emsisoft:anti-malware:5.1.0.1:*:*:*:*:*:*:*","matchCriteriaId":"488ED4D6-0A32-43D5-840C-F76919C41C45"},{"vulnerable":true,"criteria":"cpe:2.3:a:ikarus:ikarus_virus_utilities_t3_command_line_scanner:1.1.97.0:*:*:*:*:*:*:*","matchCriteriaId":"1759C4A5-67D1-4722-954A-883694E57FAB"},{"vulnerable":true,"criteria":"cpe:2.3:a:pandasecurity:panda_antivirus:10.0.2.7:*:*:*:*:*:*:*","matchCriteriaId":"D95F8C32-D238-493F-A28D-8A588E8ADD13"}]}]}],"references":[{"url":"http://www.ieee-security.org/TC/SP2012/program.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/522005","source":"cve@mitre.org"},{"url":"http://www.ieee-security.org/TC/SP2012/program.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/522005","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2012-1434","sourceIdentifier":"cve@mitre.org","published":"2012-03-21T10:11:47.723","lastModified":"2026-06-16T23:39:31.400","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"The Microsoft EXE file parser in AhnLab V3 Internet Security 2011.01.18.00, Emsisoft Anti-Malware 5.1.0.1, Ikarus Virus Utilities T3 Command Line Scanner 1.1.97.0, and Panda Antivirus 10.0.2.7 allows remote attackers to bypass malware detection via an EXE file with a \\19\\04\\00\\10 character sequence at a certain location.  NOTE: this may later be SPLIT into multiple CVEs if additional information is published showing that the error occurred independently in different EXE parser implementations."},{"lang":"es","value":"El analizador de archivos EXE Microsoft en AhnLab V3 Internet Security 2011.01.18.00, Emsisoft Anti-Malware 5.1.0.1, Ikarus Virus Utilities T3 Command Line Scanner 1.1.97.0, y Panda Antivirus 10.0.2.7 permite a atacantes remotos evitar la detección de malware a través de un archivo EXE con una secuencia de caracteres \\19\\04\\00\\10 en un lugar determinado. NOTA: esto más adelante se puede dividir en varios CVEs si la información adicional que se publica muestra que el error se produjo de forma independiente en diferentes implementaciones del analizador EXE."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ahnlab:v3_internet_security:2011.01.18.00:*:*:*:*:*:*:*","matchCriteriaId":"0B91745E-EA83-4C70-BF2D-45A3678FA157"},{"vulnerable":true,"criteria":"cpe:2.3:a:emsisoft:anti-malware:5.1.0.1:*:*:*:*:*:*:*","matchCriteriaId":"488ED4D6-0A32-43D5-840C-F76919C41C45"},{"vulnerable":true,"criteria":"cpe:2.3:a:ikarus:ikarus_virus_utilities_t3_command_line_scanner:1.1.97.0:*:*:*:*:*:*:*","matchCriteriaId":"1759C4A5-67D1-4722-954A-883694E57FAB"},{"vulnerable":true,"criteria":"cpe:2.3:a:pandasecurity:panda_antivirus:10.0.2.7:*:*:*:*:*:*:*","matchCriteriaId":"D95F8C32-D238-493F-A28D-8A588E8ADD13"}]}]}],"references":[{"url":"http://www.ieee-security.org/TC/SP2012/program.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/522005","source":"cve@mitre.org"},{"url":"http://www.ieee-security.org/TC/SP2012/program.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/522005","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2012-1435","sourceIdentifier":"cve@mitre.org","published":"2012-03-21T10:11:47.770","lastModified":"2026-06-16T23:39:31.510","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"The Microsoft EXE file parser in AhnLab V3 Internet Security 2011.01.18.00, Emsisoft Anti-Malware 5.1.0.1, eSafe 7.0.17.0, Ikarus Virus Utilities T3 Command Line Scanner 1.1.97.0, and Panda Antivirus 10.0.2.7 allows remote attackers to bypass malware detection via an EXE file with a \\50\\4B\\4C\\49\\54\\45 character sequence at a certain location.  NOTE: this may later be SPLIT into multiple CVEs if additional information is published showing that the error occurred independently in different EXE parser implementations."},{"lang":"es","value":"El analizador de archivos EXE Microsoft en AhnLab V3 Internet Security 2011.01.18.00, Emsisoft Anti-Malware 5.1.0.1, eSafe 7.0.17.0, Ikarus Virus Utilities T3 Command Line Scanner 1.1.97.0, y Panda Antivirus 10.0.2.7 permite a atacantes remotos evitar de malware detección a través de un archivo EXE con una secuencia de caracteres \\50\\4B\\4C\\49\\54\\45 en un lugar determinado. NOTA: esto más adelante se puede dividir en varios CVEs si la información adicional que se publica muestra que el error se produjo de forma independiente en diferentes implementaciones del analizador EXE."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ahnlab:v3_internet_security:2011.01.18.00:*:*:*:*:*:*:*","matchCriteriaId":"0B91745E-EA83-4C70-BF2D-45A3678FA157"},{"vulnerable":true,"criteria":"cpe:2.3:a:aladdin:esafe:7.0.17.0:*:*:*:*:*:*:*","matchCriteriaId":"5C6590DF-9164-4A76-ADEE-9110C5E3588E"},{"vulnerable":true,"criteria":"cpe:2.3:a:emsisoft:anti-malware:5.1.0.1:*:*:*:*:*:*:*","matchCriteriaId":"488ED4D6-0A32-43D5-840C-F76919C41C45"},{"vulnerable":true,"criteria":"cpe:2.3:a:ikarus:ikarus_virus_utilities_t3_command_line_scanner:1.1.97.0:*:*:*:*:*:*:*","matchCriteriaId":"1759C4A5-67D1-4722-954A-883694E57FAB"},{"vulnerable":true,"criteria":"cpe:2.3:a:pandasecurity:panda_antivirus:10.0.2.7:*:*:*:*:*:*:*","matchCriteriaId":"D95F8C32-D238-493F-A28D-8A588E8ADD13"}]}]}],"references":[{"url":"http://www.ieee-security.org/TC/SP2012/program.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/522005","source":"cve@mitre.org"},{"url":"http://www.ieee-security.org/TC/SP2012/program.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/522005","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2012-1436","sourceIdentifier":"cve@mitre.org","published":"2012-03-21T10:11:47.800","lastModified":"2026-06-16T23:39:31.623","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"The Microsoft EXE file parser in AhnLab V3 Internet Security 2011.01.18.00, Emsisoft Anti-Malware 5.1.0.1, eSafe 7.0.17.0, Ikarus Virus Utilities T3 Command Line Scanner 1.1.97.0, and Panda Antivirus 10.0.2.7 allows remote attackers to bypass malware detection via an EXE file with a \\2D\\6C\\68 character sequence at a certain location. NOTE: this may later be SPLIT into multiple CVEs if additional information is published showing that the error occurred independently in different EXE parser implementations."},{"lang":"es","value":"El analizador de archivos EXE Microsoft en AhnLab V3 Internet Security 2011.01.18.00, Emsisoft Anti-Malware 5.1.0.1, eSafe 7.0.17.0, Ikarus Virus Utilities T3 Command Line Scanner 1.1.97.0, y Panda Antivirus 10.0.2.7 permite a atacantes remotos evitar de malware detección a través de un archivo EXE con una secuencia de caracteres \\2D\\6C\\68  en un lugar determinado. NOTA: esto más adelante se puede dividir en varios CVEs si la información adicional que se publica muestra que el error se produjo de forma independiente en diferentes implementaciones del analizador EXE."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ahnlab:v3_internet_security:2011.01.18.00:*:*:*:*:*:*:*","matchCriteriaId":"0B91745E-EA83-4C70-BF2D-45A3678FA157"},{"vulnerable":true,"criteria":"cpe:2.3:a:aladdin:esafe:7.0.17.0:*:*:*:*:*:*:*","matchCriteriaId":"5C6590DF-9164-4A76-ADEE-9110C5E3588E"},{"vulnerable":true,"criteria":"cpe:2.3:a:emsisoft:anti-malware:5.1.0.1:*:*:*:*:*:*:*","matchCriteriaId":"488ED4D6-0A32-43D5-840C-F76919C41C45"},{"vulnerable":true,"criteria":"cpe:2.3:a:ikarus:ikarus_virus_utilities_t3_command_line_scanner:1.1.97.0:*:*:*:*:*:*:*","matchCriteriaId":"1759C4A5-67D1-4722-954A-883694E57FAB"},{"vulnerable":true,"criteria":"cpe:2.3:a:pandasecurity:panda_antivirus:10.0.2.7:*:*:*:*:*:*:*","matchCriteriaId":"D95F8C32-D238-493F-A28D-8A588E8ADD13"}]}]}],"references":[{"url":"http://www.ieee-security.org/TC/SP2012/program.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/522005","source":"cve@mitre.org"},{"url":"http://www.ieee-security.org/TC/SP2012/program.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/522005","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2012-1443","sourceIdentifier":"cve@mitre.org","published":"2012-03-21T10:11:48.083","lastModified":"2026-06-16T23:39:32.407","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"The RAR file parser in ClamAV 0.96.4, Rising Antivirus 22.83.00.03, Quick Heal (aka Cat QuickHeal) 11.00, G Data AntiVirus 21, AVEngine 20101.3.0.103 in Symantec Endpoint Protection 11, Command Antivirus 5.2.11.5, Ikarus Virus Utilities T3 Command Line Scanner 1.1.97.0, Emsisoft Anti-Malware 5.1.0.1, PC Tools AntiVirus 7.0.3.5, F-Prot Antivirus 4.6.2.117, VirusBuster 13.6.151.0, Fortinet Antivirus 4.2.254.0, Antiy Labs AVL SDK 2.0.3.7, K7 AntiVirus 9.77.3565, Trend Micro HouseCall 9.120.0.1004, Kaspersky Anti-Virus 7.0.0.125, Jiangmin Antivirus 13.0.900, Antimalware Engine 1.1.6402.0 in Microsoft Security Essentials 2.0, Sophos Anti-Virus 4.61.0, NOD32 Antivirus 5795, Avira AntiVir 7.11.1.163, Norman Antivirus 6.06.12, McAfee Anti-Virus Scanning Engine 5.400.0.1158, Panda Antivirus 10.0.2.7, McAfee Gateway (formerly Webwasher) 2010.1C, Trend Micro AntiVirus 9.120.0.1004, Comodo Antivirus 7424, Bitdefender 7.2, eSafe 7.0.17.0, F-Secure Anti-Virus 9.0.16160.0, nProtect Anti-Virus 2011-01-17.01, AhnLab V3 Internet Security 2011.01.18.00, AVG Anti-Virus 10.0.0.1190, avast! Antivirus 4.8.1351.0 and 5.0.677.0, and VBA32 3.12.14.2 allows user-assisted remote attackers to bypass malware detection via a RAR file with an initial MZ character sequence.  NOTE: this may later be SPLIT into multiple CVEs if additional information is published showing that the error occurred independently in different RAR parser implementations."},{"lang":"es","value":"El analizador de archivos RAR en ClamAV versión 0.96.4, Rising Antivirus versión 22.83.00.03, Quick Heal (también se conoce como Cat QuickHeal) versión 11.00, G Data AntiVirus versión 21, AVEngine versión 20101.3.0.103 en Symantec Endpoint Protection versión 11, Command Antivirus versión 5.2.11.5, Ikarus Virus Utilities T3 Command Line Scanner versión 1.1.97.0, Emsisoft Anti-Malware versión 5.1.0.1, PC Tools AntiVirus versión 7.0.3.5, F-Prot Antivirus versión 4.6.2.117, VirusBuster versión 13.6.151.0, Fortinet  antivirus versión 4.2.254.0, Antiy Labs AVL SDK versión 2.0.3.7, K7 AntiVirus versión 9.77.3565, Trend Micro HouseCall versión 9.120.0.1004, Kaspersky Antivirus versión 7.0.0.125, Jiangmin Antivirus versión 13.0.900, Antimalware Engine versión 1.1.6402.0 en Microsoft Security Essentials versión 2.0, Sophos Anti-Virus versión 4.61.0, NOD32 Antivirus versión 5795, Avira AntiVir versión 7.11.1.163, Norman Antivirus versión 6.06.12, McAfee Anti-Virus Scanning Engine versión 5.400.0.1158, Panda Antivirus versión 10.0.2.7, McAfee Gateway (anteriormente Webwasher) versión 2010.1C, Trend Micro AntiVirus versión 9.120.0.1004, Comodo Antivirus versión 7424, Bitdefender versión 7.2, eSafe versión 7.0.17.0, F-Secure Anti-Virus versión 9.0.16160.0, nProtect Versión antivirus 2011-01-17.01, AhnLab V3 Internet Security versión 2011.01.18.00, AVG Anti-Virus versión 10.0.0.1190, avast! antivirus versiones 4.8.1351.0 y 5.0.677.0, y VBA32 versión 3.12.14.2, permite a los atacantes remotos asistidos por el usuario omitir la detección de malware por medio de un archivo RAR con una inicial Secuencia de caracteres MZ. NOTA: esto puede ser más tarde SPLIT en varios CVE si se publica información adicional que muestra que el error se produjo de manera independiente en diferentes implementaciones de analizador RAR."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ahnlab:v3_internet_security:2011.01.18.00:*:*:*:*:*:*:*","matchCriteriaId":"0B91745E-EA83-4C70-BF2D-45A3678FA157"},{"vulnerable":true,"criteria":"cpe:2.3:a:aladdin:esafe:7.0.17.0:*:*:*:*:*:*:*","matchCriteriaId":"5C6590DF-9164-4A76-ADEE-9110C5E3588E"},{"vulnerable":true,"criteria":"cpe:2.3:a:alwil:avast_antivirus:4.8.1351.0:*:*:*:*:*:*:*","matchCriteriaId":"5A3A2FBE-3113-4CCB-8FCF-54CBD78FDF52"},{"vulnerable":true,"criteria":"cpe:2.3:a:alwil:avast_antivirus:5.0.677.0:*:*:*:*:*:*:*","matchCriteriaId":"7877C5C9-C4CA-406F-A61A-EAFBA846A20D"},{"vulnerable":true,"criteria":"cpe:2.3:a:anti-virus:vba32:3.12.14.2:*:*:*:*:*:*:*","matchCriteriaId":"2A0325DA-A137-41E0-BD5E-B892F2166749"},{"vulnerable":true,"criteria":"cpe:2.3:a:antiy:avl_sdk:2.0.3.7:*:*:*:*:*:*:*","matchCriteriaId":"38855431-9C17-41FE-8325-A3304DECAC92"},{"vulnerable":true,"criteria":"cpe:2.3:a:authentium:command_antivirus:5.2.11.5:*:*:*:*:*:*:*","matchCriteriaId":"192DFD98-11AA-4E7A-A1CB-53FC06FEB20F"},{"vulnerable":true,"criteria":"cpe:2.3:a:avg:avg_anti-virus:10.0.0.1190:*:*:*:*:*:*:*","matchCriteriaId":"4E62090C-AF41-4032-B9F7-78FEBDB4AAE1"},{"vulnerable":true,"criteria":"cpe:2.3:a:avira:antivir:7.11.1.163:*:*:*:*:*:*:*","matchCriteriaId":"62B656B8-A7FB-4451-8A32-CB7AB74165F0"},{"vulnerable":true,"criteria":"cpe:2.3:a:bitdefender:bitdefender:7.2:*:*:*:*:*:*:*","matchCriteriaId":"24D7D7FA-20E9-4560-ABC6-154CD918E307"},{"vulnerable":true,"criteria":"cpe:2.3:a:cat:quick_heal:11.00:*:*:*:*:*:*:*","matchCriteriaId":"343D3F40-E028-4AEE-82A4-0A17C1D1ED13"},{"vulnerable":true,"criteria":"cpe:2.3:a:clamav:clamav:0.96.4:*:*:*:*:*:*:*","matchCriteriaId":"953C363B-AD5B-4C53-AAF0-AB6BA4040D74"},{"vulnerable":true,"criteria":"cpe:2.3:a:comodo:comodo_antivirus:7424:*:*:*:*:*:*:*","matchCriteriaId":"803A9A92-A984-43A8-8D27-C9A6FDB19A9D"},{"vulnerable":true,"criteria":"cpe:2.3:a:emsisoft:anti-malware:5.1.0.1:*:*:*:*:*:*:*","matchCriteriaId":"488ED4D6-0A32-43D5-840C-F76919C41C45"},{"vulnerable":true,"criteria":"cpe:2.3:a:eset:nod32_antivirus:5795:*:*:*:*:*:*:*","matchCriteriaId":"673B999A-11D2-4AFF-9930-0C06E8BBAA7F"},{"vulnerable":true,"criteria":"cpe:2.3:a:f-prot:f-prot_antivirus:4.6.2.117:*:*:*:*:*:*:*","matchCriteriaId":"961708EB-3124-4147-A36D-BAD9241D0C88"},{"vulnerable":true,"criteria":"cpe:2.3:a:f-secure:f-secure_anti-virus:9.0.16160.0:*:*:*:*:*:*:*","matchCriteriaId":"BB884937-53F0-4BB5-AA8F-1CCDCD1221D9"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortinet_antivirus:4.2.254.0:*:*:*:*:*:*:*","matchCriteriaId":"1C36D1BA-DB17-4FE0-8D6E-BA5649AE3BF0"},{"vulnerable":true,"criteria":"cpe:2.3:a:gdata-software:g_data_antivirus:21:*:*:*:*:*:*:*","matchCriteriaId":"DA047323-54B7-460B-9AA0-88C3C4183218"},{"vulnerable":true,"criteria":"cpe:2.3:a:ikarus:ikarus_virus_utilities_t3_command_line_scanner:1.1.97.0:*:*:*:*:*:*:*","matchCriteriaId":"1759C4A5-67D1-4722-954A-883694E57FAB"},{"vulnerable":true,"criteria":"cpe:2.3:a:jiangmin:jiangmin_antivirus:13.0.900:*:*:*:*:*:*:*","matchCriteriaId":"620DC756-B821-413C-A824-43C221E573AA"},{"vulnerable":true,"criteria":"cpe:2.3:a:k7computing:antivirus:9.77.3565:*:*:*:*:*:*:*","matchCriteriaId":"B27BD224-CB70-43D2-8B0D-9F229A646B82"},{"vulnerable":true,"criteria":"cpe:2.3:a:kaspersky:kaspersky_anti-virus:7.0.0.125:*:*:*:*:*:*:*","matchCriteriaId":"FD9BCB3B-0FE8-4716-ABC2-1DB89D330F56"},{"vulnerable":true,"criteria":"cpe:2.3:a:mcafee:gateway:2010.1c:*:*:*:*:*:*:*","matchCriteriaId":"18FC30B1-4FB3-4891-93FE-63A93E686EB3"},{"vulnerable":true,"criteria":"cpe:2.3:a:mcafee:scan_engine:5.400.0.1158:*:*:*:*:*:*:*","matchCriteriaId":"0BCE1228-61BE-4C10-898A-B8BDC5A71156"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:security_essentials:2.0:*:*:*:*:*:*:*","matchCriteriaId":"7C382AA8-5E99-4669-9825-F5BBEEC12907"},{"vulnerable":true,"criteria":"cpe:2.3:a:norman:norman_antivirus_\\&_antispyware:6.06.12:*:*:*:*:*:*:*","matchCriteriaId":"81D01633-1000-425D-9026-59C50734956A"},{"vulnerable":true,"criteria":"cpe:2.3:a:nprotect:nprotect_antivirus:2011-01-17.01:*:*:*:*:*:*:*","matchCriteriaId":"D386C31F-6114-4A15-B0D5-15686D7EF8B8"},{"vulnerable":true,"criteria":"cpe:2.3:a:pandasecurity:panda_antivirus:10.0.2.7:*:*:*:*:*:*:*","matchCriteriaId":"D95F8C32-D238-493F-A28D-8A588E8ADD13"},{"vulnerable":true,"criteria":"cpe:2.3:a:pc_tools:pc_tools_antivirus:7.0.3.5:*:*:*:*:*:*:*","matchCriteriaId":"410EEFDA-CFE6-4DDE-B661-BB01009B0E60"},{"vulnerable":true,"criteria":"cpe:2.3:a:rising-global:rising_antivirus:22.83.00.03:*:*:*:*:*:*:*","matchCriteriaId":"EF8ADA91-4042-4E1B-9F14-78023F24B137"},{"vulnerable":true,"criteria":"cpe:2.3:a:sophos:sophos_anti-virus:4.61.0:*:*:*:*:*:*:*","matchCriteriaId":"0912E21E-1EEB-4ADD-958F-F8AEBBF7C5E6"},{"vulnerable":true,"criteria":"cpe:2.3:a:symantec:endpoint_protection:11.0:*:*:*:*:*:*:*","matchCriteriaId":"E269D396-3A70-4C4B-9D79-CBBA75C280D8"},{"vulnerable":true,"criteria":"cpe:2.3:a:trendmicro:housecall:9.120.0.1004:*:*:*:*:*:*:*","matchCriteriaId":"B3C3D7B7-3DD1-417E-9488-A3B0F28F75E1"},{"vulnerable":true,"criteria":"cpe:2.3:a:trendmicro:trend_micro_antivirus:9.120.0.1004:*:*:*:*:*:*:*","matchCriteriaId":"72379F97-0BCA-425A-92AE-9F336866FD07"},{"vulnerable":true,"criteria":"cpe:2.3:a:virusbuster:virusbuster:13.6.151.0:*:*:*:*:*:*:*","matchCriteriaId":"32C656A2-AAAC-494A-A981-A83144070857"}]}]}],"references":[{"url":"http://osvdb.org/80454","source":"cve@mitre.org"},{"url":"http://osvdb.org/80455","source":"cve@mitre.org"},{"url":"http://osvdb.org/80456","source":"cve@mitre.org"},{"url":"http://osvdb.org/80457","source":"cve@mitre.org"},{"url":"http://osvdb.org/80458","source":"cve@mitre.org"},{"url":"http://osvdb.org/80459","source":"cve@mitre.org"},{"url":"http://osvdb.org/80460","source":"cve@mitre.org"},{"url":"http://osvdb.org/80461","source":"cve@mitre.org"},{"url":"http://osvdb.org/80467","source":"cve@mitre.org"},{"url":"http://osvdb.org/80468","source":"cve@mitre.org"},{"url":"http://osvdb.org/80469","source":"cve@mitre.org"},{"url":"http://osvdb.org/80470","source":"cve@mitre.org"},{"url":"http://osvdb.org/80471","source":"cve@mitre.org"},{"url":"http://osvdb.org/80472","source":"cve@mitre.org"},{"url":"http://www.ieee-security.org/TC/SP2012/program.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/522005","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/52612","source":"cve@mitre.org"},{"url":"http://osvdb.org/80454","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://osvdb.org/80455","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://osvdb.org/80456","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://osvdb.org/80457","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://osvdb.org/80458","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://osvdb.org/80459","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://osvdb.org/80460","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://osvdb.org/80461","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://osvdb.org/80467","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://osvdb.org/80468","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://osvdb.org/80469","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://osvdb.org/80470","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://osvdb.org/80471","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://osvdb.org/80472","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ieee-security.org/TC/SP2012/program.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/522005","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/52612","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2012-1459","sourceIdentifier":"cve@mitre.org","published":"2012-03-21T10:11:49.597","lastModified":"2026-06-16T23:39:34.403","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"The TAR file parser in AhnLab V3 Internet Security 2011.01.18.00, Avira AntiVir 7.11.1.163, Antiy Labs AVL SDK 2.0.3.7, avast! Antivirus 4.8.1351.0 and 5.0.677.0, AVG Anti-Virus 10.0.0.1190, Bitdefender 7.2, Quick Heal (aka Cat QuickHeal) 11.00, ClamAV 0.96.4, Command Antivirus 5.2.11.5, Comodo Antivirus 7424, Emsisoft Anti-Malware 5.1.0.1, F-Prot Antivirus 4.6.2.117, F-Secure Anti-Virus 9.0.16160.0, Fortinet Antivirus 4.2.254.0, G Data AntiVirus 21, Ikarus Virus Utilities T3 Command Line Scanner 1.1.97.0, Jiangmin Antivirus 13.0.900, K7 AntiVirus 9.77.3565, Kaspersky Anti-Virus 7.0.0.125, McAfee Anti-Virus Scanning Engine 5.400.0.1158, McAfee Gateway (formerly Webwasher) 2010.1C, Antimalware Engine 1.1.6402.0 in Microsoft Security Essentials 2.0, NOD32 Antivirus 5795, Norman Antivirus 6.06.12, nProtect Anti-Virus 2011-01-17.01, Panda Antivirus 10.0.2.7, PC Tools AntiVirus 7.0.3.5, Rising Antivirus 22.83.00.03, Sophos Anti-Virus 4.61.0, AVEngine 20101.3.0.103 in Symantec Endpoint Protection 11, Trend Micro AntiVirus 9.120.0.1004, Trend Micro HouseCall 9.120.0.1004, VBA32 3.12.14.2, and VirusBuster 13.6.151.0 allows remote attackers to bypass malware detection via a TAR archive entry with a length field corresponding to that entire entry, plus part of the header of the next entry.  NOTE: this may later be SPLIT into multiple CVEs if additional information is published showing that the error occurred independently in different TAR parser implementations."},{"lang":"es","value":"El analizador de archivos TAR en AhnLab V3 Internet Security versión 2011.01.18.00, Avira AntiVir versión 7.11.1.163, Antiy Labs AVL SDK versión 2.0.3.7, avast! antivirus versiones 4.8.1351.0 y 5.0.677.0, AVG Anti-Virus versión 10.0.0.1190, Bitdefender versión 7.2, Quick Heal (también se conoce como Cat QuickHeal) versión 11.00, ClamAV versión 0.96.4, Command Antivirus versión 5.2.11.5, Comodo Antivirus versión 7424, Emsisoft Anti-Malware versión 5.1.0.1, F-Prot Antivirus versión 4.6.2.117, F-Secure Anti-Virus versión 9.0.16160.0, Fortinet Antivirus versión 4.2.254.0, G Data AntiVirus versión 21, Ikarus Virus Utilities T3 Command Line Scanner versión 1.1.97.0, Jiangmin Antivirus versión 13.0.900, K7 AntiVirus versión 9.77.3565, Kaspersky Anti-Virus versión 7.0.0.125, McAfee Anti-Virus Scanning Engine versión 5.400.0.1158, McAfee Gateway (anteriormente Webwasher) versión 2010.1C, Antimalware Engine versión 1.1.6402.0 en Microsoft Security Essentials versión 2.0, NOD32 Antivirus versión 5795, Norman Antivirus  versión 6.06.12, nProtect antivirus versión 2011-01-17.01, Panda Antivirus versión 10.0.2.7, PC Tools AntiVirus versión 7.0.3.5, Rising Antivirus versión 22.83.00.03, Sophos Anti-Virus versión 4.61.0, AVEngine versión 20101.3.0.103 en Symantec Endpoint Protection versión 11, Trend Micro AntiVirus versión 9.120.0.1004, Trend Micro HouseCall versión 9.120.0.1004, VBA32 versión 3.12.14.2 y VirusBuster versión 13.6.151.0, permite a los atacantes remotos omitir la detección de malware por medio de una entrada de archivo TAR con un campo de longitud correspondiente a toda la entrada, además de parte del encabezado de la siguiente entrada. NOTA: esto puede ser más tarde SPLIT en varios CVE si se publica información adicional que muestra que el error se produjo de manera independiente en diferentes implementaciones de analizador de TAR."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ahnlab:v3_internet_security:2011.01.18.00:*:*:*:*:*:*:*","matchCriteriaId":"0B91745E-EA83-4C70-BF2D-45A3678FA157"},{"vulnerable":true,"criteria":"cpe:2.3:a:alwil:avast_antivirus:4.8.1351.0:*:*:*:*:*:*:*","matchCriteriaId":"5A3A2FBE-3113-4CCB-8FCF-54CBD78FDF52"},{"vulnerable":true,"criteria":"cpe:2.3:a:alwil:avast_antivirus:5.0.677.0:*:*:*:*:*:*:*","matchCriteriaId":"7877C5C9-C4CA-406F-A61A-EAFBA846A20D"},{"vulnerable":true,"criteria":"cpe:2.3:a:anti-virus:vba32:3.12.14.2:*:*:*:*:*:*:*","matchCriteriaId":"2A0325DA-A137-41E0-BD5E-B892F2166749"},{"vulnerable":true,"criteria":"cpe:2.3:a:antiy:avl_sdk:2.0.3.7:*:*:*:*:*:*:*","matchCriteriaId":"38855431-9C17-41FE-8325-A3304DECAC92"},{"vulnerable":true,"criteria":"cpe:2.3:a:authentium:command_antivirus:5.2.11.5:*:*:*:*:*:*:*","matchCriteriaId":"192DFD98-11AA-4E7A-A1CB-53FC06FEB20F"},{"vulnerable":true,"criteria":"cpe:2.3:a:avg:avg_anti-virus:10.0.0.1190:*:*:*:*:*:*:*","matchCriteriaId":"4E62090C-AF41-4032-B9F7-78FEBDB4AAE1"},{"vulnerable":true,"criteria":"cpe:2.3:a:avira:antivir:7.11.1.163:*:*:*:*:*:*:*","matchCriteriaId":"62B656B8-A7FB-4451-8A32-CB7AB74165F0"},{"vulnerable":true,"criteria":"cpe:2.3:a:bitdefender:bitdefender:7.2:*:*:*:*:*:*:*","matchCriteriaId":"24D7D7FA-20E9-4560-ABC6-154CD918E307"},{"vulnerable":true,"criteria":"cpe:2.3:a:cat:quick_heal:11.00:*:*:*:*:*:*:*","matchCriteriaId":"343D3F40-E028-4AEE-82A4-0A17C1D1ED13"},{"vulnerable":true,"criteria":"cpe:2.3:a:clamav:clamav:0.96.4:*:*:*:*:*:*:*","matchCriteriaId":"953C363B-AD5B-4C53-AAF0-AB6BA4040D74"},{"vulnerable":true,"criteria":"cpe:2.3:a:comodo:comodo_antivirus:7424:*:*:*:*:*:*:*","matchCriteriaId":"803A9A92-A984-43A8-8D27-C9A6FDB19A9D"},{"vulnerable":true,"criteria":"cpe:2.3:a:emsisoft:anti-malware:5.1.0.1:*:*:*:*:*:*:*","matchCriteriaId":"488ED4D6-0A32-43D5-840C-F76919C41C45"},{"vulnerable":true,"criteria":"cpe:2.3:a:eset:nod32_antivirus:5795:*:*:*:*:*:*:*","matchCriteriaId":"673B999A-11D2-4AFF-9930-0C06E8BBAA7F"},{"vulnerable":true,"criteria":"cpe:2.3:a:f-prot:f-prot_antivirus:4.6.2.117:*:*:*:*:*:*:*","matchCriteriaId":"961708EB-3124-4147-A36D-BAD9241D0C88"},{"vulnerable":true,"criteria":"cpe:2.3:a:f-secure:f-secure_anti-virus:9.0.16160.0:*:*:*:*:*:*:*","matchCriteriaId":"BB884937-53F0-4BB5-AA8F-1CCDCD1221D9"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortinet_antivirus:4.2.254.0:*:*:*:*:*:*:*","matchCriteriaId":"1C36D1BA-DB17-4FE0-8D6E-BA5649AE3BF0"},{"vulnerable":true,"criteria":"cpe:2.3:a:gdata-software:g_data_antivirus:21:*:*:*:*:*:*:*","matchCriteriaId":"DA047323-54B7-460B-9AA0-88C3C4183218"},{"vulnerable":true,"criteria":"cpe:2.3:a:ikarus:ikarus_virus_utilities_t3_command_line_scanner:1.1.97.0:*:*:*:*:*:*:*","matchCriteriaId":"1759C4A5-67D1-4722-954A-883694E57FAB"},{"vulnerable":true,"criteria":"cpe:2.3:a:jiangmin:jiangmin_antivirus:13.0.900:*:*:*:*:*:*:*","matchCriteriaId":"620DC756-B821-413C-A824-43C221E573AA"},{"vulnerable":true,"criteria":"cpe:2.3:a:k7computing:antivirus:9.77.3565:*:*:*:*:*:*:*","matchCriteriaId":"B27BD224-CB70-43D2-8B0D-9F229A646B82"},{"vulnerable":true,"criteria":"cpe:2.3:a:kaspersky:kaspersky_anti-virus:7.0.0.125:*:*:*:*:*:*:*","matchCriteriaId":"FD9BCB3B-0FE8-4716-ABC2-1DB89D330F56"},{"vulnerable":true,"criteria":"cpe:2.3:a:mcafee:gateway:2010.1c:*:*:*:*:*:*:*","matchCriteriaId":"18FC30B1-4FB3-4891-93FE-63A93E686EB3"},{"vulnerable":true,"criteria":"cpe:2.3:a:mcafee:scan_engine:5.400.0.1158:*:*:*:*:*:*:*","matchCriteriaId":"0BCE1228-61BE-4C10-898A-B8BDC5A71156"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:security_essentials:2.0:*:*:*:*:*:*:*","matchCriteriaId":"7C382AA8-5E99-4669-9825-F5BBEEC12907"},{"vulnerable":true,"criteria":"cpe:2.3:a:norman:norman_antivirus_\\&_antispyware:6.06.12:*:*:*:*:*:*:*","matchCriteriaId":"81D01633-1000-425D-9026-59C50734956A"},{"vulnerable":true,"criteria":"cpe:2.3:a:nprotect:nprotect_antivirus:2011-01-17.01:*:*:*:*:*:*:*","matchCriteriaId":"D386C31F-6114-4A15-B0D5-15686D7EF8B8"},{"vulnerable":true,"criteria":"cpe:2.3:a:pandasecurity:panda_antivirus:10.0.2.7:*:*:*:*:*:*:*","matchCriteriaId":"D95F8C32-D238-493F-A28D-8A588E8ADD13"},{"vulnerable":true,"criteria":"cpe:2.3:a:pc_tools:pc_tools_antivirus:7.0.3.5:*:*:*:*:*:*:*","matchCriteriaId":"410EEFDA-CFE6-4DDE-B661-BB01009B0E60"},{"vulnerable":true,"criteria":"cpe:2.3:a:rising-global:rising_antivirus:22.83.00.03:*:*:*:*:*:*:*","matchCriteriaId":"EF8ADA91-4042-4E1B-9F14-78023F24B137"},{"vulnerable":true,"criteria":"cpe:2.3:a:sophos:sophos_anti-virus:4.61.0:*:*:*:*:*:*:*","matchCriteriaId":"0912E21E-1EEB-4ADD-958F-F8AEBBF7C5E6"},{"vulnerable":true,"criteria":"cpe:2.3:a:symantec:endpoint_protection:11.0:*:*:*:*:*:*:*","matchCriteriaId":"E269D396-3A70-4C4B-9D79-CBBA75C280D8"},{"vulnerable":true,"criteria":"cpe:2.3:a:trendmicro:housecall:9.120.0.1004:*:*:*:*:*:*:*","matchCriteriaId":"B3C3D7B7-3DD1-417E-9488-A3B0F28F75E1"},{"vulnerable":true,"criteria":"cpe:2.3:a:trendmicro:trend_micro_antivirus:9.120.0.1004:*:*:*:*:*:*:*","matchCriteriaId":"72379F97-0BCA-425A-92AE-9F336866FD07"},{"vulnerable":true,"criteria":"cpe:2.3:a:virusbuster:virusbuster:13.6.151.0:*:*:*:*:*:*:*","matchCriteriaId":"32C656A2-AAAC-494A-A981-A83144070857"}]}]}],"references":[{"url":"http://lists.opensuse.org/opensuse-security-announce/2012-07/msg00002.html","source":"cve@mitre.org"},{"url":"http://osvdb.org/80389","source":"cve@mitre.org"},{"url":"http://osvdb.org/80390","source":"cve@mitre.org"},{"url":"http://osvdb.org/80391","source":"cve@mitre.org"},{"url":"http://osvdb.org/80392","source":"cve@mitre.org"},{"url":"http://osvdb.org/80393","source":"cve@mitre.org"},{"url":"http://osvdb.org/80395","source":"cve@mitre.org"},{"url":"http://osvdb.org/80396","source":"cve@mitre.org"},{"url":"http://osvdb.org/80403","source":"cve@mitre.org"},{"url":"http://osvdb.org/80406","source":"cve@mitre.org"},{"url":"http://osvdb.org/80407","source":"cve@mitre.org"},{"url":"http://osvdb.org/80409","source":"cve@mitre.org"},{"url":"http://www.ieee-security.org/TC/SP2012/program.html","source":"cve@mitre.org"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2012:094","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/522005","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/52623","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/74302","source":"cve@mitre.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2012-07/msg00002.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://osvdb.org/80389","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://osvdb.org/80390","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://osvdb.org/80391","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://osvdb.org/80392","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://osvdb.org/80393","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://osvdb.org/80395","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://osvdb.org/80396","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://osvdb.org/80403","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://osvdb.org/80406","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://osvdb.org/80407","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://osvdb.org/80409","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ieee-security.org/TC/SP2012/program.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2012:094","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/522005","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/52623","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/74302","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2012-1462","sourceIdentifier":"cve@mitre.org","published":"2012-03-21T10:11:49.707","lastModified":"2026-06-16T23:39:34.833","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"The ZIP file parser in AhnLab V3 Internet Security 2011.01.18.00, AVG Anti-Virus 10.0.0.1190, Quick Heal (aka Cat QuickHeal) 11.00, Emsisoft Anti-Malware 5.1.0.1, eSafe 7.0.17.0, Fortinet Antivirus 4.2.254.0, Ikarus Virus Utilities T3 Command Line Scanner 1.1.97.0, Jiangmin Antivirus 13.0.900, Kaspersky Anti-Virus 7.0.0.125, Norman Antivirus 6.06.12, Sophos Anti-Virus 4.61.0, and AVEngine 20101.3.0.103 in Symantec Endpoint Protection 11 allows remote attackers to bypass malware detection via a ZIP file containing an invalid block of data at the beginning.  NOTE: this may later be SPLIT into multiple CVEs if additional information is published showing that the error occurred independently in different ZIP parser implementations."},{"lang":"es","value":"El analizador de archivos ZIP en AhnLab V3 Internet Security v2011.01.18.00, AVG Anti-Virus v10.0.0.1190, Quick Heal (también conocido como Cat QuickHeal) v11.00, a-squared Anti-Malware v5.1.0.1, eSafe v7.0.17.0, Fortinet Antivirus v4.2.254.0, Ikarus Virus Utilities T3 escáner de línea de comandos v1.1.97.0, Jiangmin Antivirus v13.0.900, Kaspersky Anti-Virus v7.0.0.125, Norman Antivirus v6.6.12, Sophos Anti-Virus v4.61.0, y AVEngine v20101.3.0.103 de Symantec Endpoint Protection v11 permite a los atacantes remotos eludir la detección de malware a través de un archivo ZIP que contiene un bloque de datos no válido en el cominezo. NOTA: esto más tarde se puede dividir en varios CVEs si la información adicional que se publica muestra que el error se produjo de forma independiente en diferentes implementaciones de área del analizador."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ahnlab:v3_internet_security:2011.01.18.00:*:*:*:*:*:*:*","matchCriteriaId":"0B91745E-EA83-4C70-BF2D-45A3678FA157"},{"vulnerable":true,"criteria":"cpe:2.3:a:aladdin:esafe:7.0.17.0:*:*:*:*:*:*:*","matchCriteriaId":"5C6590DF-9164-4A76-ADEE-9110C5E3588E"},{"vulnerable":true,"criteria":"cpe:2.3:a:avg:avg_anti-virus:10.0.0.1190:*:*:*:*:*:*:*","matchCriteriaId":"4E62090C-AF41-4032-B9F7-78FEBDB4AAE1"},{"vulnerable":true,"criteria":"cpe:2.3:a:cat:quick_heal:11.00:*:*:*:*:*:*:*","matchCriteriaId":"343D3F40-E028-4AEE-82A4-0A17C1D1ED13"},{"vulnerable":true,"criteria":"cpe:2.3:a:emsisoft:anti-malware:5.1.0.1:*:*:*:*:*:*:*","matchCriteriaId":"488ED4D6-0A32-43D5-840C-F76919C41C45"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortinet_antivirus:4.2.254.0:*:*:*:*:*:*:*","matchCriteriaId":"1C36D1BA-DB17-4FE0-8D6E-BA5649AE3BF0"},{"vulnerable":true,"criteria":"cpe:2.3:a:ikarus:ikarus_virus_utilities_t3_command_line_scanner:1.1.97.0:*:*:*:*:*:*:*","matchCriteriaId":"1759C4A5-67D1-4722-954A-883694E57FAB"},{"vulnerable":true,"criteria":"cpe:2.3:a:jiangmin:jiangmin_antivirus:13.0.900:*:*:*:*:*:*:*","matchCriteriaId":"620DC756-B821-413C-A824-43C221E573AA"},{"vulnerable":true,"criteria":"cpe:2.3:a:kaspersky:kaspersky_anti-virus:7.0.0.125:*:*:*:*:*:*:*","matchCriteriaId":"FD9BCB3B-0FE8-4716-ABC2-1DB89D330F56"},{"vulnerable":true,"criteria":"cpe:2.3:a:symantec:endpoint_protection:11.0:*:*:*:*:*:*:*","matchCriteriaId":"E269D396-3A70-4C4B-9D79-CBBA75C280D8"}]}]}],"references":[{"url":"http://www.ieee-security.org/TC/SP2012/program.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/522005","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/52613","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/74310","source":"cve@mitre.org"},{"url":"http://www.ieee-security.org/TC/SP2012/program.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/522005","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/52613","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/74310","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2012-1463","sourceIdentifier":"cve@mitre.org","published":"2012-03-21T10:11:49.740","lastModified":"2026-06-16T23:39:34.953","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"The ELF file parser in AhnLab V3 Internet Security 2011.01.18.00, Bitdefender 7.2, Quick Heal (aka Cat QuickHeal) 11.00, Command Antivirus 5.2.11.5, Comodo Antivirus 7424, eSafe 7.0.17.0, F-Prot Antivirus 4.6.2.117, F-Secure Anti-Virus 9.0.16160.0, McAfee Anti-Virus Scanning Engine 5.400.0.1158, Norman Antivirus 6.06.12, nProtect Anti-Virus 2011-01-17.01, and Panda Antivirus 10.0.2.7 allows remote attackers to bypass malware detection via an ELF file with a modified endianness field.  NOTE: this may later be SPLIT into multiple CVEs if additional information is published showing that the error occurred independently in different ELF parser implementations."},{"lang":"es","value":"El analizador de archivos ELF en AhnLab V3 Internet Security v2011.01.18.00, BitDefender v7.2, Quick Heal (también conocido como Cat QuickHeal) v11.00, Command Antivirus v5.2.11.5, Comodo Antivirus v7424, eSafe v7.0.17.0, F-Prot Antivirus v4.6.2.117, F-Secure Anti-Virus v9.0.16160.0, McAfee Anti-Virus Scanning Engine v5.400.0.1158, Norman Antivirus v6.6.12, nProtect anti-Virus v2011-01-17.01, y Panda Antivirus v10.0.2.7 permite a atacantes remotos evitar la detección de malware a través de un archivo ELF con un campo endianness modificado. NOTA: esto más tarde se puede dividir en varios CVEs si la información adicional que se publica muestra que el error se produjo de forma independiente en diferentes implementaciones del analizador ELF."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ahnlab:v3_internet_security:2011.01.18.00:*:*:*:*:*:*:*","matchCriteriaId":"0B91745E-EA83-4C70-BF2D-45A3678FA157"},{"vulnerable":true,"criteria":"cpe:2.3:a:aladdin:esafe:7.0.17.0:*:*:*:*:*:*:*","matchCriteriaId":"5C6590DF-9164-4A76-ADEE-9110C5E3588E"},{"vulnerable":true,"criteria":"cpe:2.3:a:authentium:command_antivirus:5.2.11.5:*:*:*:*:*:*:*","matchCriteriaId":"192DFD98-11AA-4E7A-A1CB-53FC06FEB20F"},{"vulnerable":true,"criteria":"cpe:2.3:a:bitdefender:bitdefender:7.2:*:*:*:*:*:*:*","matchCriteriaId":"24D7D7FA-20E9-4560-ABC6-154CD918E307"},{"vulnerable":true,"criteria":"cpe:2.3:a:cat:quick_heal:11.00:*:*:*:*:*:*:*","matchCriteriaId":"343D3F40-E028-4AEE-82A4-0A17C1D1ED13"},{"vulnerable":true,"criteria":"cpe:2.3:a:comodo:comodo_antivirus:7424:*:*:*:*:*:*:*","matchCriteriaId":"803A9A92-A984-43A8-8D27-C9A6FDB19A9D"},{"vulnerable":true,"criteria":"cpe:2.3:a:f-prot:f-prot_antivirus:4.6.2.117:*:*:*:*:*:*:*","matchCriteriaId":"961708EB-3124-4147-A36D-BAD9241D0C88"},{"vulnerable":true,"criteria":"cpe:2.3:a:f-secure:f-secure_anti-virus:9.0.16160.0:*:*:*:*:*:*:*","matchCriteriaId":"BB884937-53F0-4BB5-AA8F-1CCDCD1221D9"},{"vulnerable":true,"criteria":"cpe:2.3:a:mcafee:scan_engine:5.400.0.1158:*:*:*:*:*:*:*","matchCriteriaId":"0BCE1228-61BE-4C10-898A-B8BDC5A71156"},{"vulnerable":true,"criteria":"cpe:2.3:a:norman:norman_antivirus_\\&_antispyware:6.06.12:*:*:*:*:*:*:*","matchCriteriaId":"81D01633-1000-425D-9026-59C50734956A"},{"vulnerable":true,"criteria":"cpe:2.3:a:nprotect:nprotect_antivirus:2011-01-17.01:*:*:*:*:*:*:*","matchCriteriaId":"D386C31F-6114-4A15-B0D5-15686D7EF8B8"},{"vulnerable":true,"criteria":"cpe:2.3:a:pandasecurity:panda_antivirus:10.0.2.7:*:*:*:*:*:*:*","matchCriteriaId":"D95F8C32-D238-493F-A28D-8A588E8ADD13"}]}]}],"references":[{"url":"http://osvdb.org/80426","source":"cve@mitre.org"},{"url":"http://osvdb.org/80433","source":"cve@mitre.org"},{"url":"http://www.ieee-security.org/TC/SP2012/program.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/522005","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/52614","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/74311","source":"cve@mitre.org"},{"url":"http://osvdb.org/80426","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://osvdb.org/80433","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ieee-security.org/TC/SP2012/program.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/522005","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/52614","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/74311","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2013-3947","sourceIdentifier":"PSIRT-CNA@flexerasoftware.com","published":"2018-04-24T20:29:00.233","lastModified":"2026-06-16T23:56:04.200","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in MedCoreD.sys in AhnLab V3 Internet Security 8.0.7.5 (Build 1373) allows local users to gain privileges via a crafted 0xA3350014 IOCTL call."},{"lang":"es","value":"Desbordamiento de búfer en AhnLab V3 Internet Security 8.0.7.5 (Build 1373) permite que los usuarios locales obtengan privilegios mediante una llamada IOCTL 0xA3350014 manipulada."}],"affected":[{"source":"PSIRT-CNA@flexerasoftware.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","baseScore":7.8,"baseSeverity":"HIGH","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":1.8,"impactScore":5.9}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","baseScore":7.2,"accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE"},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":true,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"},{"lang":"en","value":"CWE-264"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ahnlab:v3_internet_security:8.0.7.5:*:*:*:*:*:*:*","matchCriteriaId":"FD6996B2-D9F7-4143-9F01-40FB9178FA9F"}]}]}],"references":[{"url":"http://secunia.com/advisories/54465","source":"PSIRT-CNA@flexerasoftware.com","tags":["Permissions Required","Third Party Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/90626","source":"PSIRT-CNA@flexerasoftware.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://secunia.com/advisories/54465","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Permissions Required","Third Party Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/90626","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]}]}},{"cve":{"id":"CVE-2023-49440","sourceIdentifier":"cve@mitre.org","published":"2025-10-27T16:15:35.147","lastModified":"2026-07-05T02:16:46.380","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"AhnLab EPP 1.0.15 is vulnerable to SQL Injection via the \"preview parameter.\""}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","baseScore":8.8,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":2.8,"impactScore":5.9}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2025-10-29T13:36:29.243129Z","id":"CVE-2023-49440","options":[{"exploitation":"poc"},{"automatable":"no"},{"technicalImpact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","type":"Secondary","description":[{"lang":"en","value":"CWE-89"}]}],"references":[{"url":"https://github.com/KernelCipher/CVE-2023-49440-POC","source":"cve@mitre.org"},{"url":"https://github.com/NyaMeeEain/CVE-2023-49440","source":"cve@mitre.org"}]}},{"cve":{"id":"CVE-2025-60357","sourceIdentifier":"cve@mitre.org","published":"2026-07-17T14:17:19.003","lastModified":"2026-08-11T23:50:18.237","vulnStatus":"Analyzed","cveTags":[],"descriptions":[{"lang":"en","value":"AhnLab EPP Management v1.0.14.32-6249 was discovered to contain a NoSQL injection vulnerability via the eventlog/agentEvent/list endpoint."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N","baseScore":8.1,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":5.2}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2026-07-17T16:47:32.978361Z","id":"CVE-2025-60357","options":[{"exploitation":"poc"},{"automatable":"no"},{"technicalImpact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","type":"Secondary","description":[{"lang":"en","value":"CWE-943"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ahnlab:epp_management:1.0.14.32-6249:*:*:*:*:*:*:*","matchCriteriaId":"AE68F65A-9CC1-416E-81F5-A2A4E72BDA6A"}]}]}],"references":[{"url":"https://ahnlab.com","source":"cve@mitre.org","tags":["Product"]},{"url":"https://github.com/Nullbyte3117/CVE-2025-60357","source":"cve@mitre.org","tags":["Exploit","Third Party Advisory"]},{"url":"https://github.com/Nullbyte3117/CVE-2025-60357","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","tags":["Exploit","Third Party Advisory"]}]}}]}