CVE-2012-1451

The CAB file parser in Emsisoft Anti-Malware 5.1.0.1 and Ikarus Virus Utilities T3 Command Line Scanner 1.1.97.0 allows remote attackers to bypass malware detection via a CAB file with a modified reserved2 field. NOTE: this may later be SPLIT into multiple CVEs if additional information is published showing that the error occurred independently in different CAB parser implementations.

Score

CVSS 2.0 4.3 Medium

Status

Modified - cve@mitre.org

Published

2012-03-21

Last modified

2024-09-17

Weaknesses

CWE-264

Affected products

• Anti-malware (Emsisoft)
• Ikarus Virus Utilities T3 Command Line Scanner (Ikarus)

References

• http://www.ieee-security.org/TC/SP2012/program.html
• http://www.securityfocus.com/archive/1/522005