Lucene search

K
cve[email protected]CVE-2012-1424
HistoryMar 21, 2012 - 10:11 a.m.

CVE-2012-1424

2012-03-2110:11:00
CWE-264
web.nvd.nist.gov
22
cve
2012
1424
tar file parser
malware detection
bypass
antiy labs avl sdk
quick heal
jiangmin antivirus
norman antivirus
pc tools antivirus
sophos anti-virus

7.3 High

AI Score

Confidence

Low

4.3 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

0.973 High

EPSS

Percentile

99.9%

The TAR file parser in Antiy Labs AVL SDK 2.0.3.7, Quick Heal (aka Cat QuickHeal) 11.00, Jiangmin Antivirus 13.0.900, Norman Antivirus 6.06.12, PC Tools AntiVirus 7.0.3.5, and Sophos Anti-Virus 4.61.0 allows remote attackers to bypass malware detection via a POSIX TAR file with a \19\04\00\10 character sequence at a certain location. NOTE: this may later be SPLIT into multiple CVEs if additional information is published showing that the error occurred independently in different TAR parser implementations.

7.3 High

AI Score

Confidence

Low

4.3 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

0.973 High

EPSS

Percentile

99.9%

Related for CVE-2012-1424