Lucene search

K
cve[email protected]CVE-2012-1423
HistoryMar 21, 2012 - 10:11 a.m.

CVE-2012-1423

2012-03-2110:11:47
CWE-264
web.nvd.nist.gov
23
cve-2012-1423
tar file parser
antivirus
bypass
malware detection
vulnerability

6.7 Medium

AI Score

Confidence

Low

4.3 Medium

CVSS2

Access Vector

Access Complexity

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

0.962 High

EPSS

Percentile

99.5%

The TAR file parser in Command Antivirus 5.2.11.5, Emsisoft Anti-Malware 5.1.0.1, F-Prot Antivirus 4.6.2.117, Fortinet Antivirus 4.2.254.0, Ikarus Virus Utilities T3 Command Line Scanner 1.1.97.0, K7 AntiVirus 9.77.3565, NOD32 Antivirus 5795, Norman Antivirus 6.06.12, PC Tools AntiVirus 7.0.3.5, Rising Antivirus 22.83.00.03, and VirusBuster 13.6.151.0 allows remote attackers to bypass malware detection via a POSIX TAR file with an initial MZ character sequence. NOTE: this may later be SPLIT into multiple CVEs if additional information is published showing that the error occurred independently in different TAR parser implementations.

Affected configurations

NVD
Node
authentiumcommand_antivirusMatch5.2.11.5
OR
emsisoftanti-malwareMatch5.1.0.1
OR
esetnod32_antivirusMatch5795
OR
f-protf-prot_antivirusMatch4.6.2.117
OR
fortinetfortinet_antivirusMatch4.2.254.0
OR
ikarusikarus_virus_utilities_t3_command_line_scannerMatch1.1.97.0
OR
k7computingantivirusMatch9.77.3565
OR
normannorman_antivirus_\&_antispywareMatch6.06.12
OR
pc_toolspc_tools_antivirusMatch7.0.3.5
OR
rising-globalrising_antivirusMatch22.83.00.03
OR
virusbustervirusbusterMatch13.6.151.0

6.7 Medium

AI Score

Confidence

Low

4.3 Medium

CVSS2

Access Vector

Access Complexity

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

0.962 High

EPSS

Percentile

99.5%

Related for CVE-2012-1423