OSVDB ID: 26875

Title: F-Secure Antivirus Crafted Executable Name Scan Bypass

Info

Disclosure

Jun 28, 2006

Discovery

Unknown

Dates

Exploit

Unknown

Solution

Unknown

Description

F-Secure Antivirus contains a flaw that may allow a malicious user to bypass the real-time scanning functionality. The issue is triggered when an unspecified error occurs when handling executable programs where the name has been manipulated. It is possible that the flaw may allow malware execution on the system.

Classification

Location: Remote / Network Access
Attack Type: Input Manipulation
Impact: Loss of Integrity
Exploit: Exploit Unknown
Disclosure: OSVDB Verified

Solution

Currently, there are no known workarounds or upgrades to correct this issue. However, F-Secure Corporation has released a patch to address this vulnerability.

Products

F-Secure Corporation

Anti-Virus

2004
2005
2006

Internet Security

2004
2005
2006

Client Security

5
6

Anti-Virus for Citrix Servers

5

Anti-Virus for MIMEsweeper

5

Anti-Virus for Windows Servers

5

Anti-Virus for Workstations

5

Service Platform for Service Providers

6

References

Credit

Unknown or Incomplete



Direct URL: http://osvdb.org/26875