A weakness has been reported in McAfee Anti-Virus Engine, which can be exploited by malware to bypass certain scanning functionality.

The weakness is caused due to an error when parsing .zip archive headers and can be exploited via a specially crafted .zip archive where the uncompressed size of the archived file has been modified within the local and global headers.

Successful exploitation causes malware in a specially crafted .zip archive to pass the scanning functionality undetected.

NOTE: This is not a critical issue on client systems, as the malware still is detected upon execution by the McAfee on-access scanner.

Solution
Update to McAfee Anti-Virus Engine DATS driver version 4398 or later.
Further details available in Customer Area

Provided and/or discovered by
Discovered by anonymous person and reported via iDEFENSE.

Changelog
Further details available in Customer Area

Original Advisory
http://www.idefense.com/application/poi/display?id=153&type=vulnerabilities

Deep Links
Links available in Customer Area