CVE-2005-3219 - Multiple interpretation error in unspecified versions of Avira Antivirus allows remote attackers to

CVE-2005-3219

Summary

Multiple interpretation error in unspecified versions of Avira Antivirus allows remote attackers to bypass virus detection via a malicious executable in a specially crafted RAR file with malformed central and local headers, which can still be opened by products such as Winrar and PowerZip, even though they are rejected as corrupted by Winzip and BitZipper.

References

http://marc.info/?l=bugtraq&m=112879611919750&w=2
http://shadock.net/secubox/AVCraftedArchive.html

Vulnerable Configurations

cpe:2.3:a:avira:antivir_personal:*:*:*:*:*:*:*:*
cpe:2.3:a:avira:antivir_personal:*:*:*:*:*:*:*:*

CVSS

Base:	5.1 (as of 18-10-2016 - 03:33)
Impact:
Exploitability:

CWE

NVD-CWE-Other

CAPEC

Access

Vector	Complexity	Authentication
NETWORK	HIGH	NONE

Impact

Confidentiality	Integrity	Availability
PARTIAL	PARTIAL	PARTIAL

cvss-vector via4

AV:N/AC:H/Au:N/C:P/I:P/A:P

refmap via4

bugtraq	20051007 Antivirus detection bypass by special crafted archive.
misc	http://shadock.net/secubox/AVCraftedArchive.html

Last major update

18-10-2016 - 03:33

Published

14-10-2005 - 10:02

Last modified

18-10-2016 - 03:33