CVE-2012-5456

The Zoner AntiVirus Free application for Android does not verify that the server hostname matches a domain name in the subject's Common Name (CN) field of the X.509 certificate, which allows man-in-the-middle attackers to spoof SSL servers via an arbitrary valid certificate, as demonstrated by a server used for updating virus signature files.

CVSS v2.0 4.3 MEDIUM

4.3^/10

CVSS v2.0 : MEDIUM

Vector : AV:N/AC:M/Au:N/C:N/I:P/A:N

Exploitability : 8.6 / Impact : 2.9

Access Vector NETWORK

Access Complexity MEDIUM

Authentication NONE

Confidentiality Impact NONE

Integrity Impact PARTIAL

Availability Impact NONE

References

Link	Resource
http://www.securityfocus.com/bid/56292	Third Party Advisory VDB Entry
http://www2.dcsec.uni-hannover.de/files/android/p50-fahl.pdf	Broken Link
https://exchange.xforce.ibmcloud.com/vulnerabilities/79591	Third Party Advisory VDB Entry
http://www.securityfocus.com/bid/56292	Third Party Advisory VDB Entry
http://www2.dcsec.uni-hannover.de/files/android/p50-fahl.pdf	Broken Link
https://exchange.xforce.ibmcloud.com/vulnerabilities/79591	Third Party Advisory VDB Entry

Configurations

Configuration 1 (hide)

OR	cpe:2.3:a:zoner:zoner_antivirus_free:-:-::::android::*
	cpe:2.3:a:zoner:zoner_antivirus_free:1.7.0:-::::android::*

History

21 Nov 2024, 01:44

Type	Values Removed	Values Added
References	~~() http://www.securityfocus.com/bid/56292 - Third Party Advisory, VDB Entry~~	() http://www.securityfocus.com/bid/56292 - Third Party Advisory, VDB Entry
References	~~() http://www2.dcsec.uni-hannover.de/files/android/p50-fahl.pdf - Broken Link~~	() http://www2.dcsec.uni-hannover.de/files/android/p50-fahl.pdf - Broken Link
References	~~() https://exchange.xforce.ibmcloud.com/vulnerabilities/79591 - Third Party Advisory, VDB Entry~~	() https://exchange.xforce.ibmcloud.com/vulnerabilities/79591 - Third Party Advisory, VDB Entry

Information

Published : 2012-10-24 17:55

Updated : 2024-11-21 01:44

NVD link : CVE-2012-5456

Mitre link : CVE-2012-5456

CVE.ORG link : CVE-2012-5456

JSON object : View

Products Affected

zoner

zoner_antivirus_free

CWE

CWE-310

Cryptographic Issues

{"id": "CVE-2012-5456", "metrics": {"cvssMetricV2": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"version": "2.0", "baseScore": 4.3, "accessVector": "NETWORK", "vectorString": "AV:N/AC:M/Au:N/C:N/I:P/A:N", "authentication": "NONE", "integrityImpact": "PARTIAL", "accessComplexity": "MEDIUM", "availabilityImpact": "NONE", "confidentialityImpact": "NONE"}, "acInsufInfo": false, "impactScore": 2.9, "baseSeverity": "MEDIUM", "obtainAllPrivilege": false, "exploitabilityScore": 8.6, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": false}]}, "published": "2012-10-24T17:55:02.563", "references": [{"url": "http://www.securityfocus.com/bid/56292", "tags": ["Third Party Advisory", "VDB Entry"], "source": "cve@mitre.org"}, {"url": "http://www2.dcsec.uni-hannover.de/files/android/p50-fahl.pdf", "tags": ["Broken Link"], "source": "cve@mitre.org"}, {"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/79591", "tags": ["Third Party Advisory", "VDB Entry"], "source": "cve@mitre.org"}, {"url": "http://www.securityfocus.com/bid/56292", "tags": ["Third Party Advisory", "VDB Entry"], "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "http://www2.dcsec.uni-hannover.de/files/android/p50-fahl.pdf", "tags": ["Broken Link"], "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/79591", "tags": ["Third Party Advisory", "VDB Entry"], "source": "af854a3a-2127-422b-91ae-364da2661108"}], "vulnStatus": "Modified", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "CWE-310"}]}], "descriptions": [{"lang": "en", "value": "The Zoner AntiVirus Free application for Android does not verify that the server hostname matches a domain name in the subject's Common Name (CN) field of the X.509 certificate, which allows man-in-the-middle attackers to spoof SSL servers via an arbitrary valid certificate, as demonstrated by a server used for updating virus signature files."}, {"lang": "es", "value": "La aplicacion Zoner AntiVirus Free para Android no verifica que el nombre del servidos coincide con el nombre de dominio en el campo Common Name (CN) de un certificado X.509, lo que permite atacantes \"man-in-the-middle\" a esp\u00edar servidores a trav\u00e9s de un certificado v\u00e1lido como se demostr\u00f3 mediante un servidor usado para actualizar el fichero de firmas del antivirus."}], "lastModified": "2024-11-21T01:44:42.053", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:zoner:zoner_antivirus_free:-:-:*:*:*:android:*:*", "vulnerable": true, "matchCriteriaId": "8801D323-B9BD-4DC4-9B9F-A72F74DADB64"}, {"criteria": "cpe:2.3:a:zoner:zoner_antivirus_free:1.7.0:-:*:*:*:android:*:*", "vulnerable": true, "matchCriteriaId": "02B9D2DC-A471-4906-BC7A-57BA0FAA825F"}], "operator": "OR"}]}], "sourceIdentifier": "cve@mitre.org"}