Input validation error in Antivirus One - CVE-2024-45335

Detailed vulnerability description

The vulnerability allows an attacker to bypass malware detection.

The vulnerability exists due to insufficient validation of extended file attributes when scanning files. A remote attacker can evade malware detection using specially crafted attributes for the malicious binary file.

Successful exploitation of the vulnerability may allow an attacker to compromise the affected system.

How to mitigate CVE-2024-45335

Sources

• https://helpcenter.trendmicro.com/en-us/article/TMKA-07255