Multiple AntiVirus Products ZIP File Scan Evasion Vulnerability
13 Apr. 2012
Summary
This allows remote attackers to bypass malware detection via a ZIP file containing an invalid block of data at the beginning. NOTE: this may later be SPLIT into multiple CVEs if additional information is published showing that the error occurred independently in different ZIP parser implementations.
Multiple Antivirus products are prone to a vulnerability that may allow an attacker to bypass on-demand scans.
Successful exploits will allow attackers to bypass on-demand virus scanning, possibly allowing malicious files to escape detection.
Vendor Status:
Various Vendors have issued an update for this vulnerablity
