Unscored severity · published Mar 21, 2012
CVE-2012-1429
The ELF file parser in Bitdefender 7.2, Comodo Antivirus 7424, Emsisoft Anti-Malware 5.1.0.1, eSafe 7.0.17.0, F-Secure Anti-Virus 9.0.16160.0, Ikarus Virus Utilities T3 Command…
–
CVSS
92.5%
EPSS
No
On KEV
Description
The ELF file parser in Bitdefender 7.2, Comodo Antivirus 7424, Emsisoft Anti-Malware 5.1.0.1, eSafe 7.0.17.0, F-Secure Anti-Virus 9.0.16160.0, Ikarus Virus Utilities T3 Command Line Scanner 1.1.97.0, McAfee Anti-Virus Scanning Engine 5.400.0.1158, McAfee Gateway (formerly Webwasher) 2010.1C, and nProtect Anti-Virus 2011-01-17.01 allows remote attackers to bypass malware detection via an ELF file with a ustar character sequence at a certain location. NOTE: this may later be SPLIT into multiple CVEs if additional information is published showing that the error occurred independently in different ELF parser implementations.
Exploitation
Is it being used?
Exploit prediction (EPSS)92.5% · higher than 100% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
AN
Anti-malware · Emsisoft
5.1.0.1 · source: NVD
BI
Bitdefender · Softwin
7.2 · source: NVD
CA
Comodo Antivirus · Comodo
7424 · source: NVD
ES
Esafe · Aladdin
7.0.17.0 · source: NVD
FA
F-secure Anti-virus · F-secure
9.0.16160.0 · source: NVD
GA
Gateway · Mcafee
2010.1c · source: NVD
IV
Ikarus Virus Utilities T3 Command Line Scanner · Ikarus
1.1.97.0 · source: NVD
NA
Nprotect Antivirus · Nprotect
2011-01-17.01 · source: NVD
SE
Scan Engine · Mcafee
5.400.0.1158 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2012-1429
CVE.org
https://www.cve.org/CVERecord?id=CVE-2012-1429
www.ieee-security.org
http://www.ieee-security.org/TC/SP2012/program.html
www.securityfocus.com
http://www.securityfocus.com/archive/1/522005
exchange.xforce.ibmcloud.com
https://exchange.xforce.ibmcloud.com/vulnerabilities/74244
More from Esafe
–
CVE-2012-1463
The ELF file parser in AhnLab V3 Internet Security 2011.01.18.00, Bitdefender 7.2, Quick Heal (aka Cat QuickHeal) 11.00, Command Antivirus 5.2.11.5, Comodo Antivirus 7424, eSafe…
–
CVE-2012-1462
The ZIP file parser in AhnLab V3 Internet Security 2011.01.18.00, AVG Anti-Virus 10.0.0.1190, Quick Heal (aka Cat QuickHeal) 11.00, Emsisoft Anti-Malware 5.1.0.1, eSafe 7.0.17.0,…
–
CVE-2012-1460
The Gzip file parser in Antiy Labs AVL SDK 2.0.3.7, Quick Heal (aka Cat QuickHeal) 11.00, Command Antivirus 5.2.11.5, eSafe 7.0.17.0, F-Prot Antivirus 4.6.2.117, Jiangmin…
–
CVE-2012-1457
The TAR file parser in Avira AntiVir 7.11.1.163, Antiy Labs AVL SDK 2.0.3.7, avast! Antivirus 4.8.1351.0 and 5.0.677.0, AVG Anti-Virus 10.0.0.1190, Bitdefender 7.2, Quick Heal…
–
CVE-2012-1456
The TAR file parser in AVG Anti-Virus 10.0.0.1190, Quick Heal (aka Cat QuickHeal) 11.00, Comodo Antivirus 7424, Emsisoft Anti-Malware 5.1.0.1, eSafe 7.0.17.0, F-Prot Antivirus…