CVE-2005-3217

CVE-2005-3217 describes a bypass vulnerability in unspecified versions of Symantec Antivirus. This flaw allows remote attackers to circumvent virus detection by embedding malicious executables within specially crafted RAR files that contain malformed central and local headers. While some archiving tools can still open these files, Symantec Antivirus fails to properly interpret them, leading to a detection bypass. The vulnerability has a CVSS score of 5.1, indicating a medium severity. It involves a network-based attack with high complexity, potentially leading to partial compromise of confidentiality, integrity, and availability. The high attack complexity suggests that successful exploitation requires specific conditions or attacker skill. There is no evidence of active exploitation, and no public exploit code is available on platforms like Metasploit or ExploitDB. Community discussion and media coverage for this CVE are minimal, suggesting it has not garnered significant attention or widespread concern.