Unscored severity · published Mar 21, 2012
CVE-2012-1420
The TAR file parser in Quick Heal (aka Cat QuickHeal) 11.00, Command Antivirus 5.2.11.5, F-Prot Antivirus 4.6.2.117, Fortinet Antivirus 4.2.254.0, K7 AntiVirus 9.77.3565,…
–
CVSS
97.1%
EPSS
No
On KEV
Description
The TAR file parser in Quick Heal (aka Cat QuickHeal) 11.00, Command Antivirus 5.2.11.5, F-Prot Antivirus 4.6.2.117, Fortinet Antivirus 4.2.254.0, K7 AntiVirus 9.77.3565, Kaspersky Anti-Virus 7.0.0.125, Antimalware Engine 1.1.6402.0 in Microsoft Security Essentials 2.0, NOD32 Antivirus 5795, Norman Antivirus 6.06.12, Panda Antivirus 10.0.2.7, and Rising Antivirus 22.83.00.03 allows remote attackers to bypass malware detection via a POSIX TAR file with an initial \7fELF character sequence. NOTE: this may later be SPLIT into multiple CVEs if additional information is published showing that the error occurred independently in different TAR parser implementations.
Exploitation
Is it being used?
Exploit prediction (EPSS)97.1% · higher than 100% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
AN
Antivirus · K7computing
9.77.3565 · source: NVD
CA
Command Antivirus · Authentium
5.2.11.5 · source: NVD
FA
F-prot Antivirus · F-prot
4.6.2.117 · source: NVD
FA
Fortinet Antivirus · Fortinet
4.2.254.0 · source: NVD
KA
Kaspersky Anti-virus · Kaspersky
7.0.0.125 · source: NVD
NA
Nod32 Antivirus · Eset
5795 · source: NVD
NA
Norman Antivirus & Antispyware · Norman
6.06.12 · source: NVD
PA
Panda Antivirus · Pandasecurity
10.0.2.7 · source: NVD
QH
Quick Heal · Cat
11.00 · source: NVD
RA
Rising Antivirus · Rising-global
22.83.00.03 · source: NVD
SE
Security Essentials · Microsoft
2.0 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2012-1420
CVE.org
https://www.cve.org/CVERecord?id=CVE-2012-1420
osvdb.org
http://osvdb.org/80403
osvdb.org
http://osvdb.org/80406
osvdb.org
http://osvdb.org/80407
osvdb.org
http://osvdb.org/80409
www.ieee-security.org
http://www.ieee-security.org/TC/SP2012/program.html
www.securityfocus.com
http://www.securityfocus.com/archive/1/522005
More from Command Antivirus
–
CVE-2012-1463
The ELF file parser in AhnLab V3 Internet Security 2011.01.18.00, Bitdefender 7.2, Quick Heal (aka Cat QuickHeal) 11.00, Command Antivirus 5.2.11.5, Comodo Antivirus 7424, eSafe…
–
CVE-2012-1461
The Gzip file parser in AVG Anti-Virus 10.0.0.1190, Bitdefender 7.2, Command Antivirus 5.2.11.5, Emsisoft Anti-Malware 5.1.0.1, F-Secure Anti-Virus 9.0.16160.0, Fortinet Antivirus…
–
CVE-2012-1460
The Gzip file parser in Antiy Labs AVL SDK 2.0.3.7, Quick Heal (aka Cat QuickHeal) 11.00, Command Antivirus 5.2.11.5, eSafe 7.0.17.0, F-Prot Antivirus 4.6.2.117, Jiangmin…
–
CVE-2012-1459
The TAR file parser in AhnLab V3 Internet Security 2011.01.18.00, Avira AntiVir 7.11.1.163, Antiy Labs AVL SDK 2.0.3.7, avast! Antivirus 4.8.1351.0 and 5.0.677.0, AVG Anti-Virus…
–
CVE-2012-1457
The TAR file parser in Avira AntiVir 7.11.1.163, Antiy Labs AVL SDK 2.0.3.7, avast! Antivirus 4.8.1351.0 and 5.0.677.0, AVG Anti-Virus 10.0.0.1190, Bitdefender 7.2, Quick Heal…