Title: F-Secure Antivirus Crafted Executable Name Scan Bypass
Info
Disclosure
Jun 28, 2006
Discovery
Unknown
Dates
Exploit
Unknown
Solution
Unknown
Description
F-Secure Antivirus contains a flaw that may allow a malicious user to bypass the real-time scanning functionality. The issue is triggered when an unspecified error occurs when handling executable programs where the name has been manipulated. It is possible that the flaw may allow malware execution on the system.
Classification
Location:
Remote / Network Access
Attack Type:
Input Manipulation
Impact:
Loss of Integrity
Exploit:
Exploit Unknown
Disclosure:
OSVDB Verified
Solution
Currently, there are no known workarounds or upgrades to correct this issue. However, F-Secure Corporation has released a patch to address this vulnerability.