CVE-2009-1348

State: Published
Severity: Not scored
Published: Apr 30, 2009
Updated: Aug 7, 2024
Reserved: Apr 20, 2009

Description

The AV engine before DAT 5600 in McAfee VirusScan, Total Protection, Internet Security, SecurityShield for Microsoft ISA Server, Security for Microsoft Sharepoint, Security for Email Servers, Email Gateway, and Active Virus Defense allows remote attackers to bypass virus detection via (1) an invalid Headflags field in a malformed RAR archive, (2) an invalid Packsize field in a malformed RAR archive, or (3) an invalid Filelength field in a malformed ZIP archive.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
n/an/a	n/aAffected

References

20090501 [TZO-18-2009] Mcafee multiple evasions/bypasses (RAR, ZIP)mailing-list
https://kc.mcafee.com/corporate/index?page=content&id=SB10001&actp=LIST_RECENT
34949third-party-advisory
34780vdb-entry
http://blog.zoller.lu/2009/04/mcafee-multiple-bypassesevasions-ziprar.html

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.