Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
The TAR file parser in Antiy Labs AVL SDK 2.0.3.7, Quick Heal (aka Cat QuickHeal) 11.00, Jiangmin Antivirus 13.0.900, Norman Antivirus 6.06.12, PC Tools AntiVirus 7.0.3.5, and Sophos Anti-Virus 4.61.0 allows remote attackers to bypass malware detection via a POSIX TAR file with a \19\04\00\10 character sequence at a certain location. NOTE: this may later be SPLIT into multiple CVEs if additional information is published showing that the error occurred independently in different TAR parser implementations.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
多个杀毒产品TAR文件权限许可和访问控制漏洞
Vulnerability Description
Antiy Labs AVL SDK 2.0.3.7版本,Quick Heal(也称Cat QuickHeal)11.00版本,Jiangmin Antivirus 13.0.900版本,Norman Antivirus 6.06.12版本,PC Tools AntiVirus 7.0.3.5版本,以及Sophos Anti-Virus 4.61.0版本中的TAR文件解析器中存在漏洞。远程攻击者可利用该漏洞借助在某些位置有\19\04\00\10字符序列的POSIX TAR文件,绕过恶意软件检测。
CVSS Information
N/A
Vulnerability Type
N/A