VulnerabilityModified

CVE-2012-1441

The Microsoft EXE file parser in eSafe 7.0.17.0 and Prevx 3.0 allows remote attackers to bypass malware detection via an EXE file with a modified value in any of several e_ fields.

MEDIUM 4.3EPSS 70.3%

Does this matter?

EPSS puts the probability of exploitation in the next 30 days at 70.3%, higher than 99% of all known CVEs. Patch or mitigate before the next change window.

Description

The Microsoft EXE file parser in eSafe 7.0.17.0 and Prevx 3.0 allows remote attackers to bypass malware detection via an EXE file with a modified value in any of several e_ fields. NOTE: this may later be SPLIT into multiple CVEs if additional information is published showing that the error occurred independently in different EXE parser implementations.

CVSS 2.0: 4.3 MEDIUMAV:N/AC:M/Au:N/C:N/I:P/A:N
EPSS: 70.28% probability · 99th percentile
CISA KEV: Not listed
Weakness: CWE-264
Affected: aladdin/esafe · prevx/prevx
Source: cve@mitre.org

References

Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.