7.6
CVE-2009-1348
- EPSS 0.4%
- Published 30.04.2009 20:30:00
- Last modified 09.04.2025 00:30:58
- Source cve@mitre.org
- Teams watchlist Login
- Open Login
The AV engine before DAT 5600 in McAfee VirusScan, Total Protection, Internet Security, SecurityShield for Microsoft ISA Server, Security for Microsoft Sharepoint, Security for Email Servers, Email Gateway, and Active Virus Defense allows remote attackers to bypass virus detection via (1) an invalid Headflags field in a malformed RAR archive, (2) an invalid Packsize field in a malformed RAR archive, or (3) an invalid Filelength field in a malformed ZIP archive.
Data is provided by the National Vulnerability Database (NVD)
Mcafee ≫ Internet Security Suite Version2004
Mcafee ≫ Internet Security Suite Version2005
Mcafee ≫ Internet Security Suite Version2006
Mcafee ≫ Internet Security Suite Version2009
Mcafee ≫ Total Protection Version2009
Mcafee ≫ Virusscan Enterprise Version- Update- Editionlinux
Mcafee ≫ Virusscan Enterprise Version- Update- Editionsap
Mcafee ≫ Virusscan Enterprise Version- Update- Editionstorage
Mcafee ≫ Virusscan Plus Version2009
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
| Type | Source | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 0.4% | 0.599 |
| Source | Base Score | Exploit Score | Impact Score | Vector string |
|---|---|---|---|---|
| nvd@nist.gov | 7.6 | 4.9 | 10 |
AV:N/AC:H/Au:N/C:C/I:C/A:C
|
CWE-20 Improper Input Validation
The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.