Unscored severity · published Mar 21, 2012
CVE-2012-1450
The CAB file parser in Emsisoft Anti-Malware 5.1.0.1, Sophos Anti-Virus 4.61.0, and Ikarus Virus Utilities T3 Command Line Scanner 1.1.97.0 allows remote attackers to bypass…
–
CVSS
73.5%
EPSS
No
On KEV
Description
The CAB file parser in Emsisoft Anti-Malware 5.1.0.1, Sophos Anti-Virus 4.61.0, and Ikarus Virus Utilities T3 Command Line Scanner 1.1.97.0 allows remote attackers to bypass malware detection via a CAB file with a modified reserved3 field. NOTE: this may later be SPLIT into multiple CVEs if additional information is published showing that the error occurred independently in different CAB parser implementations.
Exploitation
Is it being used?
Exploit prediction (EPSS)73.5% · higher than 99% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
AN
Anti-malware · Emsisoft
5.1.0.1 · source: NVD
IV
Ikarus Virus Utilities T3 Command Line Scanner · Ikarus
1.1.97.0 · source: NVD
SA
Sophos Anti-virus · Sophos
4.61.0 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2012-1450
CVE.org
https://www.cve.org/CVERecord?id=CVE-2012-1450
www.ieee-security.org
http://www.ieee-security.org/TC/SP2012/program.html
www.securityfocus.com
http://www.securityfocus.com/archive/1/522005
www.securityfocus.com
http://www.securityfocus.com/bid/52617
More from Anti-malware
7.5
CVE-2019-7651
EPP.sys in Emsisoft Anti-Malware prior to version 2018.12 allows an attacker to bypass ACLs because Interpreted Device Characteristics lacks FILE_DEVICE_SECURE_OPEN and therefore…
–
CVE-2012-1462
The ZIP file parser in AhnLab V3 Internet Security 2011.01.18.00, AVG Anti-Virus 10.0.0.1190, Quick Heal (aka Cat QuickHeal) 11.00, Emsisoft Anti-Malware 5.1.0.1, eSafe 7.0.17.0,…
–
CVE-2012-1461
The Gzip file parser in AVG Anti-Virus 10.0.0.1190, Bitdefender 7.2, Command Antivirus 5.2.11.5, Emsisoft Anti-Malware 5.1.0.1, F-Secure Anti-Virus 9.0.16160.0, Fortinet Antivirus…
–
CVE-2012-1459
The TAR file parser in AhnLab V3 Internet Security 2011.01.18.00, Avira AntiVir 7.11.1.163, Antiy Labs AVL SDK 2.0.3.7, avast! Antivirus 4.8.1351.0 and 5.0.677.0, AVG Anti-Virus…
–
CVE-2012-1457
The TAR file parser in Avira AntiVir 7.11.1.163, Antiy Labs AVL SDK 2.0.3.7, avast! Antivirus 4.8.1351.0 and 5.0.677.0, AVG Anti-Virus 10.0.0.1190, Bitdefender 7.2, Quick Heal…