Multiple Interpretation Error in Fortinet Antivirus

CVE-2005-3221

Summary

A vulnerability exists in unspecified versions of Fortinet Antivirus due to a multiple interpretation error that allows remote attackers to bypass virus detection. This is achieved through a specially crafted RAR file containing malformed central and local headers. As a result, malicious executables can be recognized by certain archive utilities, such as WinRAR and PowerZip, while being flagged as corrupted by others like WinZip and BitZipper. This discrepancy enables attackers to exploit the flaw for potential malicious intent.

References