VRDA Feed by JPCERT/CC
  Vulnerability Response Decision Assistance Feed : Information for vulnerability impact analysis
[ about VRDA Feed | JPCERT/CC



 
Vulnerability Analysis Result (Revision No : 1) [ Download XML
JVNDB-2012-001872     ( CVE-2012-1463 | CVE-2012-1463 )
複数の製品の ELF ファイルパーサにおけるマルウェア検知を回避される脆弱性
http://jvndb.jvn.jp/ja/contents/2012/JVNDB-2012-001872.html

Original

複数の製品の ELF ファイルパーサには、マルウェア検知を回避される脆弱性が存在します。 異なる ELF パーサ の実装にも問題があると公表された場合、本脆弱性は複数の CVE に分割される可能性があります。

Translation   (Show)





About This Analysis Information
Analysis Information Provider:
JVN iPedia
First Published:
2012-03-23
Source Information Category:
Advisory, Alert
Last Updated:
2012-03-23




Affected Product Tags
cpe:/a:ahnlab:v3_internet_security
cpe:/a:aladdin:esafe
cpe:/a:authentium:command_antivirus
cpe:/a:bitdefender:bitdefender
cpe:/a:cat:quick_heal
cpe:/a:comodo:comodo_antivirus
cpe:/a:f-prot:f-prot_antivirus
cpe:/a:f-secure:f-secure_anti-virus
cpe:/a:mcafee:scan_engine
cpe:/a:norman:norman_antivirus_%26_antispyware
cpe:/a:nprotect:nprotect_antivirus
cpe:/a:pandasecurity:panda_antivirus
 


Vulnerability Analysis Results
[Access Vector]  [?]
Undefined [?]

Local [?]
Adjacent Network [?]
X Network [?]

[Access Complexit]  [?]
Undefined [?]

High [?]
X Medium [?]
Low [?]

[Authentication]  [?]
Undefined [?]

Multiple [?]
Single [?]
X None [?]

[Confidentiality Impact]  [?]
Undefined [?]

X None [?]
Partial [?]
Complete [?]

[Integrity Impact]  [?]
Undefined [?]

None [?]
X Partial [?]
Complete [?]

[Availability Impact]  [?]
Undefined [?]

X None [?]
Partial [?]
Complete [?]

Alternatives
Common Vulnerabilities and Exposures (CVE) CVE-2012-1463




National Vulnerability Database (NVD) CVE-2012-1463








References
Authentium Command Antivirus




BitDefender Bitdefender




Comodo Comodo Antivirus




FRISK Software International F-Prot Antivirus




McAfee MacAfee Scan Engine




Norman Norman Antivirus




Panda Security Panda Antivirus




Quick Heal Technologies Quick Heal




nProtect nProtect Anti-Virus




アラジン eSafe




アンラボ V3 Internet Security




共通脆弱性タイプ一覧 (CWE) 認可・権限・アクセス制御(CWE-264)




日本F-Secure株式会社 F-Secure Anti-Virus




認可・権限・アクセス制御 CWE-264





Copyright © 2012 JPCERT/CC All Rights Reserved.