CVE-2009-1348
High
Description
The AV engine before DAT 5600 in McAfee VirusScan, Total Protection, Internet Security, SecurityShield for Microsoft ISA Server, Security for Microsoft Sharepoint, Security for Email Servers, Email Gateway, and Active Virus Defense allows remote attackers to bypass virus detection via (1) an invalid Headflags field in a malformed RAR archive, (2) an invalid Packsize field in a malformed RAR archive, or (3) an invalid Filelength field in a malformed ZIP archive.
SeverityHigh
CVSS7.6
Exploit probability—
ProductMcafee Active Virus Defense
PublishedApr 30, 2009
First seenApr 30, 2009
How to fix
Sources list no fixed version or patch link for this vulnerability.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| mcafee active_virus_defense | No range specified | — |
| mcafee active_virusscan | No range specified | — |
| mcafee email_gateway | No range specified | — |
| mcafee internet_security_suite | No range specified, 2004, 2005, 2006, 2009 | — |
| mcafee securityshield_for_email_servers | No range specified | — |
| mcafee securityshield_for_microsoft_isa_server | No range specified | — |
| mcafee securityshield_for_microsoft_sharepoint | No range specified | — |
| mcafee total_protection | 2009 | — |
| mcafee total_protection_for_endpoint | No range specified | — |
| mcafee virusscan_commandline | No range specified | — |
| mcafee virusscan_enterprise | No range specified | — |
| mcafee virusscan_plus | 2009 | — |
| mcafee virusscan_usb | No range specified | — |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.