Unscored severity · published Mar 21, 2012
CVE-2012-1458
The Microsoft CHM file parser in ClamAV 0.96.4 and Sophos Anti-Virus 4.61.0 allows remote attackers to bypass malware detection via a crafted reset interval in the LZXC header of…
–
CVSS
73.7%
EPSS
No
On KEV
Description
The Microsoft CHM file parser in ClamAV 0.96.4 and Sophos Anti-Virus 4.61.0 allows remote attackers to bypass malware detection via a crafted reset interval in the LZXC header of a CHM file. NOTE: this may later be SPLIT into multiple CVEs if additional information is published showing that the error occurred independently in different CHM parser implementations.
Exploitation
Is it being used?
Exploit prediction (EPSS)73.7% · higher than 99% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
CL
Clamav · Clamav
0.96.4 · source: NVD
SA
Sophos Anti-virus · Sophos
4.61.0 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2012-1458
CVE.org
https://www.cve.org/CVERecord?id=CVE-2012-1458
lists.opensuse.org
http://lists.opensuse.org/opensuse-security-announce/2012-07/msg00002.html
osvdb.org
http://osvdb.org/80473
osvdb.org
http://osvdb.org/80474
www.ieee-security.org
http://www.ieee-security.org/TC/SP2012/program.html
www.mandriva.com
http://www.mandriva.com/security/advisories?name=MDVSA-2012:094
www.securityfocus.com
http://www.securityfocus.com/archive/1/522005
More from Clamav
9.8
CVE-2025-20260
A vulnerability in the PDF scanning processes of ClamAV could allow an unauthenticated, remote attacker to cause a buffer overflow condition, cause a denial of service (DoS)…
9.8
CVE-2023-20032
On Feb 15, 2023, the following vulnerability in the ClamAV scanning library was disclosed: A vulnerability in the HFS+ partition file parser of ClamAV versions 1.0.0 and…
9.8
CVE-2013-7088
ClamAV before 0.97.7 has buffer overflow in the libclamav component
9.8
CVE-2013-7087
ClamAV before 0.97.7 has WWPack corrupt heap memory
9.8
CVE-2007-6745
clamav 0.91.2 suffers from a floating point exception when using ScanOLE2