Input validation error in Antivirus One - CVE-2024-45335

Vulnerability details

The vulnerability allows an attacker to bypass malware detection.

The vulnerability exists due to insufficient validation of extended file attributes when scanning files. A remote attacker can evade malware detection using specially crafted attributes for the malicious binary file.

Successful exploitation of the vulnerability may allow an attacker to compromise the affected system.

Affected software

How to mitigate CVE-2024-45335

External References

• https://helpcenter.trendmicro.com/en-us/article/TMKA-07255

Related Security Bulletins

• Malware detection bypass in Trend Micro Antivirus One