CVE-2012-1442: Medium severity Aladdin eSafe vulnerability
The ELF file parser in Quick Heal (aka Cat QuickHeal) 11.00, McAfee Anti-Virus Scanning Engine 5.400.0.1158, McAfee Gateway (formerly Webwasher) 2010.1C, eSafe 7.0.17.0, Kaspersky Anti-Virus 7.0.0.125, F-Secure Anti-Virus 9.0.16160.0, Sophos Anti-Virus 4.61.0, Antiy Labs AVL SDK 2.0.3.7, Rising Antivirus 22.83.00.03, Fortinet Antivirus 4.2.254.0, and Panda Antivirus 10.0.2.7 allows remote attackers to bypass malware detection via an ELF file with a modified class field. NOTE: this may later be SPLIT into multiple CVEs if additional information is published showing that the error occurred independently in different ELF parser implementations.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2012-1442?
CVE-2012-1442 is classified as a medium severity vulnerability.
How do I fix CVE-2012-1442?
To fix CVE-2012-1442, update your affected antivirus software to the latest version that addresses this vulnerability.
Which software is affected by CVE-2012-1442?
CVE-2012-1442 affects several antivirus software solutions including Quick Heal 11.00, Kaspersky Anti-Virus 7.0.0.125, and others.
What type of vulnerability is CVE-2012-1442?
CVE-2012-1442 is a vulnerability in the ELF file parser used by several antivirus applications.
Is there a workaround for CVE-2012-1442?
Currently, the best approach to mitigate CVE-2012-1442 is to promptly update the affected antivirus software.