CVE-2012-1457

CVE-2012-1457 affects the TAR file parser in multiple antivirus products (e.g., ClamAV and others) and allows remote attackers to bypass malware detection by crafting a TAR entry whose length exceeds the TAR file size. Connected advisories confirm this issue across vendor updates (e.g., openSUSE ...

CVE-2012-1459

CVE-2012-1459 affects multiple antivirus products including ClamAV. The issue is a vulnerability in the TAR file parser where a TAR archive entry length field could correspond to the entire entry plus part of the header of the next entry, allowing remote attackers to bypass malware detection. The...

CVE-2023-1627

CVE-2023-1627 affects Jianming Antivirus 16.2.2022.418. The issue resides in the library kvcore.sys, specifically the IoControlCode Handler, where improper handling/manipulation can trigger denial of service. Impact is local to the host. Public disclosure of the exploit is indicated. Connected do...

CVE-2012-1443

CVE-2012-1443 describes a bypass in the RAR file parser used by multiple antivirus products (e.g., ClamAV 0.96.4-related integrations and several vendors) where a RAR file starting with an MZ character sequence can be analyzed by user-assisted remote attackers to bypass malware detection. The evi...

CVE-2012-1456

The CVE-2012-1456 entry concerns a vulnerability in the TAR file parser across multiple AV products (AVG, Quick Heal, Comodo, Emsisoft, eSafe, F-Prot, Fortinet, Ikarus, Jiangmin, Kaspersky, McAfee, Norman, Panda, Rising, Sophos, AVEngine 20101.3.0.103 in Symantec Endpoint Protection, Trend Micro)...

CVE-2012-1461

The CVE-2012-1461 entry documents a vulnerability in the Gzip file parser used by multiple antivirus products (e.g., AVG, Bitdefender, Kaspersky, Symantec Endpoint Protection, Trend Micro, and others) that allows remote attackers to bypass malware detection by delivering a .tar.gz file containing...

CVE-2023-1628

Jianming Antivirus 16.2.2022.418 is affected by a vulnerability in the kvcore.sys IoControlCode Handler where manipulation of an unknown function leads to a null pointer dereference. The attack is local in nature, and public exploits have been disclosed. Remediation status is not consistently doc...

CVE-2023-1626

CVE-2023-1626 affects Jianming Antivirus 16.2.2022.418, where the vulnerability resides in the library kvcore.sys, IoControlCode Handler. The issue leads to memory corruption and requires local access to exploit; exploitation has been disclosed publicly per the records. Affected component and roo...

CVE-2012-1462

CVE-2012-1462 describes a vulnerability in the ZIP file parser used by multiple antivirus products (e.g., Symantec Endpoint Protection 11, AhnLab V3 Internet Security, AVG, Quick Heal, Emsisoft Anti-Malware, Sophos, Kaspersky, Fortinet, etc.). The issue allows remote attackers to bypass malware d...

CVE-2023-1631

CVE-2023-1631 concerns JiangMin Antivirus 16.2.2022.418. Affected component: IOCTL Handler in kvcore.sys, function 0x222010. Root cause described as a null pointer dereference, exploitable via local access. Several connected sources confirm the issue and its local-exploitation nature; no remote v...

CVE-2023-1629

CVE-2023-1629 affects JiangMin Antivirus 16.2.2022.418. The vulnerability lies in the IOCTL Handler’s function 0x222010 within kvcore.sys, causing memory corruption when invoked locally. An exploit has been publicly disclosed and exploitability is local. No official patch/version is specified in ...

CVE-2012-1425

The CVE-2012-1425 entry covers a flaw in the TAR file parser used by multiple antivirus products (e.g., Avira AntiVir, AVL SDK, Quick Heal, Emsisoft, Fortinet, Ikarus, Jiangmin, Kaspersky, McAfee engines, NOD32, Norman, PC Tools, Symantec Endpoint Protection, Trend Micro) where a TAR file beginni...

CVE-2012-1460

Technical details are not publicly available in the provided documents; monitor for updates.

CVE-2023-1630

Affected software: JiangMin Antivirus 16.2.2022.418.Vulnerable component/trigger: function 0x222000 in the kvcore.sys IOCTL Handler.Root cause/impact: manipulation leads to denial of service; local access required.Exploit status: public disclosure; exploit may be used.Remediation notes (public do...

CVE-2012-1424

The CVE-2012-1424 entry relates to a vulnerability in the TAR file parser used by multiple products: Antiy Labs AVL SDK 2.0.3.7, Quick Heal (Cat QuickHeal) 11.00, Jiangmin Antivirus 13.0.900, Norman Antivirus 6.06.12, PC Tools AntiVirus 7.0.3.5, and Sophos Anti-Virus 4.61.0. The issue allows remo...

CVE-2020-14955

The CVE-2020-14955 entry concerns Jiangmin Antivirus 16.0.13.129, where the KVFG.sys driver mishandles input values for IOCTL 0x220440. This input-validation weakness allows local users to trigger a denial of service (BSOD) and potentially other unspecified impacts. The vulnerability is described...