CVE-2012-1426
The TAR file parser in Quick Heal (aka Cat QuickHeal) 11.00, Command Antivirus 5.2.11.5, F-Prot Antivirus 4.6.2.117, K7 AntiVirus 9.77.3565, Norman Antivirus 6.06.12, and Rising Antivirus 22.83.00.03 allows remote attackers to bypass malware detection via a POSIX TAR file with an initial \42\5A\68 character sequence. NOTE: this may later be SPLIT into multiple CVEs if additional information is published showing that the error occurred independently in different TAR parser implementations.
- Score
- CVSS 2.0 4.3 Medium
- Status
- Modified - cve@mitre.org
- Published
- 2012-03-21
- Last modified
- 2024-08-06
- Weaknesses
- CWE-264
Affected products
- Command Antivirus (Authentium)
- Quick Heal (Cat)
- F-prot Antivirus (F-prot)
- Antivirus (K7computing)
- Norman Antivirus & Antispyware (Norman)
- Rising Antivirus (Rising-global)
References
- http://osvdb.org/80406
- http://osvdb.org/80407
- http://osvdb.org/80409
- http://www.ieee-security.org/TC/SP2012/program.html
- http://www.securityfocus.com/archive/1/522005
- http://www.securityfocus.com/bid/52585
- https://exchange.xforce.ibmcloud.com/vulnerabilities/74241
