Vulnerability Intelligence Report
CVE-2009-1348
The AV engine before DAT 5600 in McAfee VirusScan, Total Protection, Internet Security, SecurityShield for Microsoft ISA Server, Security for Microsoft Sharepoint, Security for Email Servers, Email Gateway, and Active Virus Defense allows remote attackers to bypass virus detection via (1) an invalid Headflags field in a malformed RAR archive, (2) an invalid Packsize field in a malformed RAR archive, or (3) an invalid Filelength field in a malformed ZIP archive.
No Active Exploit Signals
CVSS Base Score
7.6
HIGH
EPSS Probability:2.83%
Executive Threat Verdict
Evaluating...
Evaluating Threat Landscape...
Assessing known weaponization, exploitation telemetry, and federal advisories.
Attack Surface
—
Authentication
—
Weaponization
—
SSVC Action
—
Affected Products & Versions
| Vendor | Product | Affected Versions |
|---|---|---|
| mcafee | active_virus_defense | all |
| mcafee | active_virusscan | all |
| mcafee | email_gateway | all |
| mcafee | internet_security_suite | 2004, 2005, 2006, 2009 |
| mcafee | securityshield_for_email_servers | all |
| mcafee | securityshield_for_microsoft_isa_server | all |
| mcafee | securityshield_for_microsoft_sharepoint | all |
| mcafee | total_protection | 2009 |
| mcafee | total_protection_for_endpoint | all |
| mcafee | virusscan_commandline | all |
| mcafee | virusscan_enterprise | all |
| mcafee | virusscan_plus | 2009 |
| mcafee | virusscan_usb | all |
References & Technical Advisories
No reference links found.
Threat Intelligence Signals
EPSS Score
2.835%
GitHub Advisory
Identity & Timeline
| Status | PUBLISHED |
| Assigning Authority | MITRE Corporation · N/A · USA |
| Reserved | 2009-04-20T00:00:00 |
| Published | 2009-04-30T20:00:00 |
| Patch Date | 2009-04-30 |
| Last Updated | 2024-08-07T05:13:24 |
Community Chatter & Buzz