CVE:CVE-2012-1446
CNNVD:CNNVD-201203-410
Quick Heal（也称Cat QuickHeal）11.00版本，McAfee Anti-Virus Scanning Engine 5.400.0.1158版本，Symantec Endpoint Protection 11中的AVEngine 20101.3.0.103版本，Norman Antivirus 6.06.12版本，eSafe 7.0.17.0版本，Kaspersky Anti-Virus 7.0.0.125版本，McAfee Gateway (原来的Webwasher) 2010.1C版本，Sophos Anti-Virus 4.61.0版本，CA eTrust Vet Antivirus 36.1.8511版本，Antiy Labs AVL SDK 2.0.3.7版本，PC Tools AntiVirus 7.0.3.5版本，Rising Antivirus 22.83.00.03版本，Fortinet Antivirus 4.2.254.0版本，以及Panda Antivirus 10.0.2版本中的ELF文件解析器中存在漏洞。远程攻击者可利用该漏洞借助修改过encoding字段的ELF文件绕过恶意软件检测。
solution:Upgrade aladdin esafe to a higher version than 7.0.17.0,and avoid the version 7.0.17.0; Upgrade antiy avl_sdk to a higher version than 2.0.3.7,and avoid the version 2.0.3.7; Upgrade ca etrust_vet_antivirus to a higher version than 36.1.8511,and avoid the version 36.1.8511; Upgrade cat quick_heal to a higher version than 11.00,and avoid the version 11.00; Upgrade fortinet fortinet_antivirus to a higher version than 4.2.254.0,and avoid the version 4.2.254.0; Upgrade kaspersky kaspersky_anti-virus to a higher version than 7.0.0.125,and avoid the version 7.0.0.125; Upgrade mcafee gateway to a higher version than 2010.1c,and avoid the version 2010.1c; Upgrade mcafee scan_engine to a higher version than 5.400.0.1158,and avoid the version 5.400.0.1158; Upgrade norman norman_antivirus_&_antispyware to a higher version than 6.06.12,and avoid the version 6.06.12; Upgrade pandasecurity panda_antivirus to a higher version than 10.0.2.7,and avoid the version 10.0.2.7; Upgrade pc_tools pc_tools_antivirus to a higher version than 7.0.3.5,and avoid the version 7.0.3.5; Upgrade rising-global rising_antivirus to a higher version than 22.83.00.03,and avoid the version 22.83.00.03; Upgrade sophos sophos_anti-virus to a higher version than 4.61.0,and avoid the version 4.61.0; Upgrade symantec endpoint_protection to a higher version than 11.0,and avoid the version 11.0