// For flags

CVE-2012-1456

 

Severity Score

4.3
*CVSS v2

Exploit Likelihood

*EPSS

Affected Versions

*CPE

Public Exploits

0
*Multiple Sources

Exploited in Wild

-
*KEV

Decision

-
*SSVC
Descriptions

The TAR file parser in AVG Anti-Virus 10.0.0.1190, Quick Heal (aka Cat QuickHeal) 11.00, Comodo Antivirus 7424, Emsisoft Anti-Malware 5.1.0.1, eSafe 7.0.17.0, F-Prot Antivirus 4.6.2.117, Fortinet Antivirus 4.2.254.0, Ikarus Virus Utilities T3 Command Line Scanner 1.1.97.0, Jiangmin Antivirus 13.0.900, Kaspersky Anti-Virus 7.0.0.125, McAfee Anti-Virus Scanning Engine 5.400.0.1158, McAfee Gateway (formerly Webwasher) 2010.1C, NOD32 Antivirus 5795, Norman Antivirus 6.06.12, Panda Antivirus 10.0.2.7, Rising Antivirus 22.83.00.03, Sophos Anti-Virus 4.61.0, AVEngine 20101.3.0.103 in Symantec Endpoint Protection 11, Trend Micro AntiVirus 9.120.0.1004, and Trend Micro HouseCall 9.120.0.1004 allows remote attackers to bypass malware detection via a TAR file with an appended ZIP file. NOTE: this may later be SPLIT into multiple CVEs if additional information is published showing that the error occurred independently in different TAR parser implementations.

El analizador de archivos TAR en AVG Anti-Virus 10.0.0.1190, Quick Heal (también conocido como Cat QuickHeal) 11.00, Comodo Antivirus 7424, a-squared Anti-Malware 5.1.0.1, eSafe 7.0.17.0, F-Prot Antivirus 4.6.2.117, Fortinet Antivirus 4.2 .254.0, Ikarus Virus Utilities Comando escáner de la línea T3 1.1.97.0, Jiangmin Antivirus 13.0.900, Kaspersky Anti-Virus 7.0.0.125, McAfee Anti-Virus Scanning Engine 5.400.0.1158, McAfee gateway (anteriormente Webwasher) 2010.1C, NOD32 Antivirus 5795 , Norman Antivirus 6.6.12, Panda Antivirus 10.0.2.7, Rising Antivirus 22.83.00.03, Sophos Anti-Virus 4.61.0, AVEngine 20101.3.0.103 de Symantec Endpoint Protection 11, Trend Micro AntiVirus 9.120.0.1004, y Trend Micro HouseCall 9.120. 0.1004 permite a atacantes remotos evitar la detección de malware a través de un archivo tar con un archivo ZIP adjunto. NOTA: esto más adelante se puede dividir en varios CVEs si la información adicional que se publica muestra que el error se produjo de forma independiente en diferentes implementaciones de tar analizador.

*Credits: N/A
CVSS Scores
Attack Vector
Network
Attack Complexity
Medium
Authentication
None
Confidentiality
None
Integrity
Partial
Availability
None
* Common Vulnerability Scoring System
SSVC
  • Decision:-
Exploitation
-
Automatable
-
Tech. Impact
-
* Organization's Worst-case Scenario
Timeline
  • 2012-02-29 CVE Reserved
  • 2012-03-21 CVE Published
  • 2024-08-06 CVE Updated
  • 2024-11-09 EPSS Updated
  • ---------- Exploited in Wild
  • ---------- KEV Due Date
  • ---------- First Exploit
CWE
  • CWE-264: Permissions, Privileges, and Access Controls
CAPEC
Affected Vendors, Products, and Versions
Vendor Product Version Other Status
Vendor Product Version Other Status <-- --> Vendor Product Version Other Status
Aladdin
Search vendor "Aladdin"
Esafe
Search vendor "Aladdin" for product "Esafe"
7.0.17.0
Search vendor "Aladdin" for product "Esafe" and version "7.0.17.0"
-
Affected
Avg
Search vendor "Avg"
Avg Anti-virus
Search vendor "Avg" for product "Avg Anti-virus"
10.0.0.1190
Search vendor "Avg" for product "Avg Anti-virus" and version "10.0.0.1190"
-
Affected
Cat
Search vendor "Cat"
Quick Heal
Search vendor "Cat" for product "Quick Heal"
11.00
Search vendor "Cat" for product "Quick Heal" and version "11.00"
-
Affected
Comodo
Search vendor "Comodo"
Comodo Antivirus
Search vendor "Comodo" for product "Comodo Antivirus"
7424
Search vendor "Comodo" for product "Comodo Antivirus" and version "7424"
-
Affected
Emsisoft
Search vendor "Emsisoft"
Anti-malware
Search vendor "Emsisoft" for product "Anti-malware"
5.1.0.1
Search vendor "Emsisoft" for product "Anti-malware" and version "5.1.0.1"
-
Affected
Eset
Search vendor "Eset"
Nod32 Antivirus
Search vendor "Eset" for product "Nod32 Antivirus"
5795
Search vendor "Eset" for product "Nod32 Antivirus" and version "5795"
-
Affected
F-prot
Search vendor "F-prot"
F-prot Antivirus
Search vendor "F-prot" for product "F-prot Antivirus"
4.6.2.117
Search vendor "F-prot" for product "F-prot Antivirus" and version "4.6.2.117"
-
Affected
Fortinet
Search vendor "Fortinet"
Fortinet Antivirus
Search vendor "Fortinet" for product "Fortinet Antivirus"
4.2.254.0
Search vendor "Fortinet" for product "Fortinet Antivirus" and version "4.2.254.0"
-
Affected
Ikarus
Search vendor "Ikarus"
Ikarus Virus Utilities T3 Command Line Scanner
Search vendor "Ikarus" for product "Ikarus Virus Utilities T3 Command Line Scanner"
1.1.97.0
Search vendor "Ikarus" for product "Ikarus Virus Utilities T3 Command Line Scanner" and version "1.1.97.0"
-
Affected
Jiangmin
Search vendor "Jiangmin"
Jiangmin Antivirus
Search vendor "Jiangmin" for product "Jiangmin Antivirus"
13.0.900
Search vendor "Jiangmin" for product "Jiangmin Antivirus" and version "13.0.900"
-
Affected
Kaspersky
Search vendor "Kaspersky"
Kaspersky Anti-virus
Search vendor "Kaspersky" for product "Kaspersky Anti-virus"
7.0.0.125
Search vendor "Kaspersky" for product "Kaspersky Anti-virus" and version "7.0.0.125"
-
Affected
Mcafee
Search vendor "Mcafee"
Gateway
Search vendor "Mcafee" for product "Gateway"
2010.1c
Search vendor "Mcafee" for product "Gateway" and version "2010.1c"
-
Affected
Mcafee
Search vendor "Mcafee"
Scan Engine
Search vendor "Mcafee" for product "Scan Engine"
5.400.0.1158
Search vendor "Mcafee" for product "Scan Engine" and version "5.400.0.1158"
-
Affected
Norman
Search vendor "Norman"
Norman Antivirus \& Antispyware
Search vendor "Norman" for product "Norman Antivirus \& Antispyware"
6.06.12
Search vendor "Norman" for product "Norman Antivirus \& Antispyware" and version "6.06.12"
-
Affected
Pandasecurity
Search vendor "Pandasecurity"
Panda Antivirus
Search vendor "Pandasecurity" for product "Panda Antivirus"
10.0.2.7
Search vendor "Pandasecurity" for product "Panda Antivirus" and version "10.0.2.7"
-
Affected
Rising-global
Search vendor "Rising-global"
Rising Antivirus
Search vendor "Rising-global" for product "Rising Antivirus"
22.83.00.03
Search vendor "Rising-global" for product "Rising Antivirus" and version "22.83.00.03"
-
Affected
Sophos
Search vendor "Sophos"
Sophos Anti-virus
Search vendor "Sophos" for product "Sophos Anti-virus"
4.61.0
Search vendor "Sophos" for product "Sophos Anti-virus" and version "4.61.0"
-
Affected
Symantec
Search vendor "Symantec"
Endpoint Protection
Search vendor "Symantec" for product "Endpoint Protection"
11.0
Search vendor "Symantec" for product "Endpoint Protection" and version "11.0"
-
Affected
Trendmicro
Search vendor "Trendmicro"
Housecall
Search vendor "Trendmicro" for product "Housecall"
9.120.0.1004
Search vendor "Trendmicro" for product "Housecall" and version "9.120.0.1004"
-
Affected
Trendmicro
Search vendor "Trendmicro"
Trend Micro Antivirus
Search vendor "Trendmicro" for product "Trend Micro Antivirus"
9.120.0.1004
Search vendor "Trendmicro" for product "Trend Micro Antivirus" and version "9.120.0.1004"
-
Affected