CVE-2012-1446: Medium severity Aladdin eSafe vulnerability
The ELF file parser in Quick Heal (aka Cat QuickHeal) 11.00, McAfee Anti-Virus Scanning Engine 5.400.0.1158, AVEngine 20101.3.0.103 in Symantec Endpoint Protection 11, Norman Antivirus 6.06.12, eSafe 7.0.17.0, Kaspersky Anti-Virus 7.0.0.125, McAfee Gateway (formerly Webwasher) 2010.1C, Sophos Anti-Virus 4.61.0, CA eTrust Vet Antivirus 36.1.8511, Antiy Labs AVL SDK 2.0.3.7, PC Tools AntiVirus 7.0.3.5, Rising Antivirus 22.83.00.03, Fortinet Antivirus 4.2.254.0, and Panda Antivirus 10.0.2.7 allows remote attackers to bypass malware detection via an ELF file with a modified encoding field. NOTE: this may later be SPLIT into multiple CVEs if additional information is published showing that the error occurred independently in different ELF parser implementations.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2012-1446?
CVE-2012-1446 is classified as a high severity vulnerability due to the potential for remote code execution.
How do I fix CVE-2012-1446?
To fix CVE-2012-1446, update your anti-virus software to the latest version that addresses this vulnerability.
Which software is affected by CVE-2012-1446?
CVE-2012-1446 affects various software including McAfee, Kaspersky, Symantec Endpoint Protection, and QuickHeal among others.
What type of vulnerability is CVE-2012-1446?
CVE-2012-1446 is an arbitrary code execution vulnerability that arises from flaws in the ELF file parser.
How can I know if my system is vulnerable to CVE-2012-1446?
You can determine if your system is vulnerable to CVE-2012-1446 by checking whether you are using any of the affected anti-virus software versions.