Unscored severity · published Mar 21, 2012
CVE-2012-1461
The Gzip file parser in AVG Anti-Virus 10.0.0.1190, Bitdefender 7.2, Command Antivirus 5.2.11.5, Emsisoft Anti-Malware 5.1.0.1, F-Secure Anti-Virus 9.0.16160.0, Fortinet Antivirus…
–
CVSS
91.7%
EPSS
No
On KEV
Description
The Gzip file parser in AVG Anti-Virus 10.0.0.1190, Bitdefender 7.2, Command Antivirus 5.2.11.5, Emsisoft Anti-Malware 5.1.0.1, F-Secure Anti-Virus 9.0.16160.0, Fortinet Antivirus 4.2.254.0, Ikarus Virus Utilities T3 Command Line Scanner 1.1.97.0, Jiangmin Antivirus 13.0.900, K7 AntiVirus 9.77.3565, Kaspersky Anti-Virus 7.0.0.125, McAfee Anti-Virus Scanning Engine 5.400.0.1158, McAfee Gateway (formerly Webwasher) 2010.1C, NOD32 Antivirus 5795, Norman Antivirus 6.06.12, Rising Antivirus 22.83.00.03, Sophos Anti-Virus 4.61.0, AVEngine 20101.3.0.103 in Symantec Endpoint Protection 11, Trend Micro AntiVirus 9.120.0.1004, Trend Micro HouseCall 9.120.0.1004, and VBA32 3.12.14.2 allows remote attackers to bypass malware detection via a .tar.gz file with multiple compressed streams. NOTE: this may later be SPLIT into multiple CVEs if additional information is published showing that the error occurred independently in different Gzip parser implementations.
Exploitation
Is it being used?
Exploit prediction (EPSS)91.7% · higher than 100% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
AN
Anti-malware · Emsisoft
5.1.0.1 · source: NVD
AN
Antivirus · K7computing
9.77.3565 · source: NVD
AA
Avg Anti-virus · Avg
10.0.0.1190 · source: NVD
BI
Bitdefender · Bitdefender
7.2 · source: NVD
CA
Command Antivirus · Authentium
5.2.11.5 · source: NVD
EP
Endpoint Protection · Symantec
11.0 · source: NVD
FA
F-secure Anti-virus · F-secure
9.0.16160.0 · source: NVD
FA
Fortinet Antivirus · Fortinet
4.2.254.0 · source: NVD
GA
Gateway · Mcafee
2010.1c · source: NVD
HO
Housecall · Trendmicro
9.120.0.1004 · source: NVD
IV
Ikarus Virus Utilities T3 Command Line Scanner · Ikarus
1.1.97.0 · source: NVD
JA
Jiangmin Antivirus · Jiangmin
13.0.900 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2012-1461
CVE.org
https://www.cve.org/CVERecord?id=CVE-2012-1461
osvdb.org
http://osvdb.org/80500
osvdb.org
http://osvdb.org/80501
osvdb.org
http://osvdb.org/80502
osvdb.org
http://osvdb.org/80503
osvdb.org
http://osvdb.org/80504
osvdb.org
http://osvdb.org/80505
More from Vba32
7.1
CVE-2024-23440
Vba32 Antivirus v3.36.0 is vulnerable to an Arbitrary Memory Read vulnerability. The 0x22200B IOCTL code of the Vba32m64.sys driver allows to read up to 0x802 of memory from ar…
7.1
CVE-2024-23439
Vba32 Antivirus v3.36.0 is vulnerable to an Arbitrary Memory Read vulnerability by triggering the 0x22201B, 0x22201F, 0x222023, 0x222027 ,0x22202B, 0x22202F, 0x22203F, 0x222057…
5.5
CVE-2024-23441
Vba32 Antivirus v3.36.0 is vulnerable to a Denial of Service vulnerability by triggering the 0x2220A7 IOCTL code of the Vba32m64.sys driver
–
CVE-2012-1460
The Gzip file parser in Antiy Labs AVL SDK 2.0.3.7, Quick Heal (aka Cat QuickHeal) 11.00, Command Antivirus 5.2.11.5, eSafe 7.0.17.0, F-Prot Antivirus 4.6.2.117, Jiangmin…
–
CVE-2012-1459
The TAR file parser in AhnLab V3 Internet Security 2011.01.18.00, Avira AntiVir 7.11.1.163, Antiy Labs AVL SDK 2.0.3.7, avast! Antivirus 4.8.1351.0 and 5.0.677.0, AVG Anti-Virus…