CVE:CVE-2009-1348
CNNVD:CNNVD-200904-560
McAfee VirusScan, Total Protection, Internet Security, Microsoft ISA Server SecurityShield，Microsoft Sharepoint Security，Security for Email Servers, Email Gateway和Active Virus Defense中的AV引擎DAT5600之前版本允许远程攻击者借助(1)畸形的RAR存档文件中的一个无效的Headflags字段，(2)畸形的RAR存档文件中的一个无效的Packsize字段，或(3)畸形的ZIP存档文件中的一个无效的文件长度字段，绕过病毒检测。
solution:Upgrade mcafee active_virus_defense to a higher version than *; Upgrade mcafee active_virusscan to a higher version than *; Upgrade mcafee email_gateway to a higher version than *; Upgrade mcafee internet_security_suite to a higher version than *,2004,2005,2006,2009,and avoid the version 2004,2005,2006,2009; Upgrade mcafee securityshield_for_email_servers to a higher version than *; Upgrade mcafee securityshield_for_microsoft_isa_server to a higher version than *; Upgrade mcafee securityshield_for_microsoft_sharepoint to a higher version than *; Upgrade mcafee total_protection to a higher version than 2009,and avoid the version 2009; Upgrade mcafee total_protection_for_endpoint to a higher version than *; Upgrade mcafee virusscan_commandline to a higher version than *; Upgrade mcafee virusscan_enterprise to a higher version than *,-; Upgrade mcafee virusscan_plus to a higher version than 2009,and avoid the version 2009; Upgrade mcafee virusscan_usb to a higher version than *