CVE-2005-3399: cat quick_heal
Vulnerability summary
CVE-2005-3399 is a medium (CVSS 5.0) vulnerability in cat quick_heal. EPSS estimates a 7.81% chance of exploitation in the next 30 days, higher than 94.6% of scored vulnerabilities.
Timeline
- 01-11-2005PublishedVulnerability first disclosed.
- 07-08-2024Last modifiedVulnerability information updated.
Description
Multiple interpretation error in CAT-QuickHeal 8.0 allows remote attackers to bypass virus scanning via a file such as BAT, HTML, and EML with an "MZ" magic byte sequence which is normally associated with EXE, which causes the file to be treated as a safe type that could still be executed as a dangerous file type by applications on the end system, as demonstrated by a "triple headed" program that contains EXE, EML, and HTML content, aka the "magic byte bug."
CVSS metrics
1 score · 1 source · 1 versionEPSS trend
Probability
7.81%
Chance of exploitation in the next 30 days
Percentile
95%
Versus all other CVEs
30-day change
0.00 pp
From 7.81% on 18-09-2026
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
0 foundNo public exploits indexed.
Weaknesses
CWE · root causeNo weakness data has been published for this record.
Affected systems
Cat1 product
- quick_heal8.0
1 vendor · 1 product