First published: Fri Oct 14 2005(Updated: )
Multiple interpretation error in unspecified versions of AntiVir Antivirus allows remote attackers to bypass virus detection via a malicious executable in a specially crafted RAR file with malformed central and local headers, which can still be opened by products such as Winrar and PowerZip, even though they are rejected as corrupted by Winzip and BitZipper.
Credit: cve@mitre.org
Affected Software | Affected Version | How to fix |
---|---|---|
Avira AV Pack |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
CVE-2005-3224 has been classified with a severity that indicates critical security implications for affected versions of AntiVir Antivirus.
To mitigate CVE-2005-3224, users should ensure they are using the latest version of AntiVir Antivirus that addresses this vulnerability.
Multiple unspecified versions of AntiVir Antivirus are affected by CVE-2005-3224, specifically those prior to the patch that addresses this issue.
Attackers can exploit CVE-2005-3224 by sending specially crafted RAR files containing malicious executables that bypass virus detection.
CVE-2005-3224 involves RAR files with malformed central and local headers, which can be opened by other software like Winrar or PowerZip without being detected.