Orange Business Services
Vigil@nce Vigil@nce Vigil@nce
we track for your security since 1999
 home presentation vulnerabilities documentation contact  
subscriber area subscriber area
free access free access
The Vigil@nce team watches vulnerabilities impacting your computers, and then offers solutions, a database and tools to correct them.
recent vulnerabilities recent vulnerabilities
tracked products tracked products
RSS feed RSS feed
vulnerability

vulnerability 8795

Norman Antivirus: bypassing via RAR

Synthesis of the vulnerability

An attacker can create a RAR archive containing a virus which is not detected by Norman products.
Severity: 2/4.
Creation date: 15/06/2009.

Impacted products

Description of the vulnerability

Norman products detect viruses contained in RAR archives.

However, an attacker can create a slightly malformed archive (Size and Method), which can still be opened by Unrar tools, but which cannot be opened by the antivirus.

An attacker can therefore create a RAR archive containing a virus which is not detected by Norman products.

Share this bulletin

Delicious Digg Facebook Google bookmarks LinkedIn Mail Reddit StumbleUpon Technorati Twitter Yahoo 

Complete Vigil@nce bulletin

Norman Antivirus: bypassing via RAR

Characteristics

Title: Norman Antivirus: bypassing via RAR.
Keywords: Antivirus Method Norman RAR Size Unrar bypassing.
Identifiers: BID-35357, TZO-32-2009, VIGILANCE-VUL-8795.

Information sources

Publications and announces

Solutions for this vulnerability

Patch or workaround

Computer vulnerabilities tracking service

Vigil@nce provides application vulnerability bulletins. The Vigil@nce security watch publishes vulnerability bulletins about threats impacting the information system. The technology watch team tracks security threats targeting the computer system. The Vigil@nce computer vulnerability tracking service alerts your teams of vulnerabilities or threats impacting your information system.



















Copyright 1999-2012 Vigil@nce. Vigil@nce is a service from Orange Business Services. Site map. Legal notice. Version française