FreeBSD VuXML: Documenting security issues in FreeBSD and the FreeBSD Ports Collection

CVE-2012-1458

This CVE name corresponds to:

Entered	Topic
2012-06-16	clamav -- multiple vulnerabilities

The following information is adapted from the Common Vulnerabilities and Exposures (CVE) project. CVE and the CVE logo are trademarks of The MITRE Corporation. CVE content is Copyright 2005, The MITRE Corporation.

CVE-2012-1458 at cve.mitre.org

Details

Type	Candidate
Name	CVE-2012-1458
Phase	Assigned(20120229)

Description

The Microsoft CHM file parser in ClamAV 0.96.4 and Sophos Anti-Virus 4.61.0 allows remote attackers to bypass malware detection via a crafted reset interval in the LZXC header of a CHM file. NOTE: this may later be SPLIT into multiple CVEs if additional information is published showing that the error occurred independently in different CHM parser implementations.

References

Source	Reference
BUGTRAQ	20120319 Evasion attacks expoliting file-parsing vulnerabilities in antivirus products
MISC	http://www.ieee-security.org/TC/SP2012/program.html
SUSE	openSUSE-SU-2012:0833
OSVDB	80473
OSVDB	80474