CVE-2012-1441

medium · 4.3

The Microsoft EXE file parser in eSafe 7.0.17.0 and Prevx 3.0 allows remote attackers to bypass malware detection via an EXE file with a modified value in any of several e_ fields. NOTE: this may later be SPLIT into multiple CVEs if additional information is published showing that the error occurred independently in different EXE parser implementations.

4.3

CVSS

70.3%

EPSS (exploit prob.)

99th

EPSS percentile

2012-03-21

Published

AV:N/AC:M/Au:N/C:N/I:P/A:N

Weaknesses

CWE-264

Affected products

Vendor	Product	Affected versions
aladdin	esafe	7.0.17.0
prevx	prevx	3.0

Check a specific version with /api/v1/cve/match.

References

http://www.ieee-security.org/TC/SP2012/program.html
http://www.securityfocus.com/archive/1/522005
http://www.ieee-security.org/TC/SP2012/program.html
http://www.securityfocus.com/archive/1/522005

Query this programmatically:

curl https://evil-db.io/api/v1/cve/CVE-2012-1441