CVE-2005-3378

CVE-2005-3378 describes a multiple interpretation error in Norman Virus Control 5.81 with engine 5.83.02. This vulnerability allows remote attackers to bypass virus scanning by crafting files (e.g., BAT, HTML, EML) that begin with the "MZ" magic byte sequence, typically associated with executables. The scanner incorrectly identifies these files as safe, even though they can still be executed as dangerous file types by end-user applications, exemplified by a "triple-headed" program. The vulnerability has a CVSS score of 5.1, indicating a medium severity. It is exploitable over the network (AV:N) but requires high attack complexity (AC:H), with potential for partial impact on confidentiality, integrity, and availability (C:P/I:P/A:P). There is no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage surrounding this CVE.