The RAR file parser in ClamAV 0.96.4, Rising Antivirus 22.83.00.03, Quick Heal (aka Cat QuickHeal) 11.00, G Data AntiVirus 21, AVEngine 20101.3.0.103 in Symantec Endpoint Protection 11, Command Antivirus 5.2.11.5, Ikarus Virus Utilities T3 Command Line Scanner 1.1.97.0, Emsisoft Anti-Malware 5.1.0.1, PC Tools AntiVirus 7.0.3.5, F-Prot Antivirus 4.6.2.117, VirusBuster 13.6.151.0, Fortinet Antivirus 4.2.254.0, Antiy Labs AVL SDK 2.0.3.7, K7 AntiVirus 9.77.3565, Trend Micro HouseCall 9.120.0.1004, Kaspersky Anti-Virus 7.0.0.125, Jiangmin Antivirus 13.0.900, Antimalware Engine 1.1.6402.0 in Microsoft Security Essentials 2.0, Sophos Anti-Virus 4.61.0, NOD32 Antivirus 5795, Avira AntiVir 7.11.1.163, Norman Antivirus 6.06.12, McAfee Anti-Virus Scanning Engine 5.400.0.1158, Panda Antivirus 10.0.2.7, McAfee Gateway (formerly Webwasher) 2010.1C, Trend Micro AntiVirus 9.120.0.1004, Comodo Antivirus 7424, Bitdefender 7.2, eSafe 7.0.17.0, F-Secure Anti-Virus 9.0.16160.0, nProtect Anti-Virus 2011-01-17.01, AhnLab V3 Internet Security 2011.01.18.00, AVG Anti-Virus 10.0.0.1190, avast! Antivirus 4.8.1351.0 and 5.0.677.0, and VBA32 3.12.14.2 allows user-assisted remote attackers to bypass malware detection via a RAR file with an initial MZ character sequence. NOTE: this may later be SPLIT into multiple CVEs if additional information is published showing that the error occurred independently in different RAR parser implementations.

No CVSS v4.0

No CVSS v3.1

No CVSS v3.0

Access Vector Network

Access Complexity Medium

Authentication None

Confidentiality Impact None

Integrity Impact Partial

Availability Impact None

This CVE is not in the KEV list.

The EPSS score is 0.50208.

Key SSVC decision points have not yet been added.

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor Product Default status Versions
n/a n/a affected
Version Status Constraints
n/a affected —

Configuration 1 [-]

OR cpe:2.3:a:ahnlab:v3_internet_security:2011.01.18.00:*:*:*:*:*:*:*
cpe:2.3:a:aladdin:esafe:7.0.17.0:*:*:*:*:*:*:*
cpe:2.3:a:alwil:avast_antivirus:4.8.1351.0:*:*:*:*:*:*:*
cpe:2.3:a:alwil:avast_antivirus:5.0.677.0:*:*:*:*:*:*:*
cpe:2.3:a:anti-virus:vba32:3.12.14.2:*:*:*:*:*:*:*
cpe:2.3:a:antiy:avl_sdk:2.0.3.7:*:*:*:*:*:*:*
cpe:2.3:a:authentium:command_antivirus:5.2.11.5:*:*:*:*:*:*:*
cpe:2.3:a:avg:avg_anti-virus:10.0.0.1190:*:*:*:*:*:*:*
cpe:2.3:a:avira:antivir:7.11.1.163:*:*:*:*:*:*:*
cpe:2.3:a:bitdefender:bitdefender:7.2:*:*:*:*:*:*:*
cpe:2.3:a:cat:quick_heal:11.00:*:*:*:*:*:*:*
cpe:2.3:a:clamav:clamav:0.96.4:*:*:*:*:*:*:*
cpe:2.3:a:comodo:comodo_antivirus:7424:*:*:*:*:*:*:*
cpe:2.3:a:emsisoft:anti-malware:5.1.0.1:*:*:*:*:*:*:*
cpe:2.3:a:eset:nod32_antivirus:5795:*:*:*:*:*:*:*
cpe:2.3:a:f-prot:f-prot_antivirus:4.6.2.117:*:*:*:*:*:*:*
cpe:2.3:a:f-secure:f-secure_anti-virus:9.0.16160.0:*:*:*:*:*:*:*
cpe:2.3:a:fortinet:fortinet_antivirus:4.2.254.0:*:*:*:*:*:*:*
cpe:2.3:a:gdata-software:g_data_antivirus:21:*:*:*:*:*:*:*
cpe:2.3:a:ikarus:ikarus_virus_utilities_t3_command_line_scanner:1.1.97.0:*:*:*:*:*:*:*
cpe:2.3:a:jiangmin:jiangmin_antivirus:13.0.900:*:*:*:*:*:*:*
cpe:2.3:a:k7computing:antivirus:9.77.3565:*:*:*:*:*:*:*
cpe:2.3:a:kaspersky:kaspersky_anti-virus:7.0.0.125:*:*:*:*:*:*:*
cpe:2.3:a:mcafee:gateway:2010.1c:*:*:*:*:*:*:*
cpe:2.3:a:mcafee:scan_engine:5.400.0.1158:*:*:*:*:*:*:*
cpe:2.3:a:microsoft:security_essentials:2.0:*:*:*:*:*:*:*
cpe:2.3:a:norman:norman_antivirus_\&_antispyware:6.06.12:*:*:*:*:*:*:*
cpe:2.3:a:nprotect:nprotect_antivirus:2011-01-17.01:*:*:*:*:*:*:*
cpe:2.3:a:pandasecurity:panda_antivirus:10.0.2.7:*:*:*:*:*:*:*
cpe:2.3:a:pc_tools:pc_tools_antivirus:7.0.3.5:*:*:*:*:*:*:*
cpe:2.3:a:rising-global:rising_antivirus:22.83.00.03:*:*:*:*:*:*:*
cpe:2.3:a:sophos:sophos_anti-virus:4.61.0:*:*:*:*:*:*:*
cpe:2.3:a:symantec:endpoint_protection:11.0:*:*:*:*:*:*:*
cpe:2.3:a:trendmicro:housecall:9.120.0.1004:*:*:*:*:*:*:*
cpe:2.3:a:trendmicro:trend_micro_antivirus:9.120.0.1004:*:*:*:*:*:*:*
cpe:2.3:a:virusbuster:virusbuster:13.6.151.0:*:*:*:*:*:*:*

No data.

No data.

Project Subscriptions

Vendors Products
Ahnlab Subscribe
V3 Internet Security Subscribe
Aladdin Subscribe
Esafe Subscribe
Alwil Subscribe
Avast Antivirus Subscribe
Anti-virus Subscribe
Vba32 Subscribe
Antiy Subscribe
Avl Sdk Subscribe
Authentium Subscribe
Command Antivirus Subscribe
Avg Subscribe
Avg Anti-virus Subscribe
Avira Subscribe
Antivir Subscribe
Bitdefender Subscribe
Bitdefender Subscribe
Cat Subscribe
Quick Heal Subscribe
Clamav Subscribe
Clamav Subscribe
Comodo Subscribe
Comodo Antivirus Subscribe
Emsisoft Subscribe
Anti-malware Subscribe
Eset Subscribe
Nod32 Antivirus Subscribe
F-prot Subscribe
F-prot Antivirus Subscribe
F-secure Subscribe
F-secure Anti-virus Subscribe
Fortinet Subscribe
Fortinet Antivirus Subscribe
Gdata-software Subscribe
G Data Antivirus Subscribe
Ikarus Subscribe
Ikarus Virus Utilities T3 Command Line Scanner Subscribe
Jiangmin Subscribe
Jiangmin Antivirus Subscribe
K7computing Subscribe
Antivirus Subscribe
Kaspersky Subscribe
Kaspersky Anti-virus Subscribe
Mcafee Subscribe
Gateway Subscribe
Scan Engine Subscribe
Microsoft Subscribe
Security Essentials Subscribe
Norman Subscribe
Norman Antivirus \& Antispyware Subscribe
Nprotect Subscribe
Nprotect Antivirus Subscribe
Pandasecurity Subscribe
Panda Antivirus Subscribe
Pc Tools Subscribe
Pc Tools Antivirus Subscribe
Rising-global Subscribe
Rising Antivirus Subscribe
Sophos Subscribe
Sophos Anti-virus Subscribe
Symantec Subscribe
Endpoint Protection Subscribe
Trendmicro Subscribe
Housecall Subscribe
Trend Micro Antivirus Subscribe
Virusbuster Subscribe
Virusbuster Subscribe
Advisories

No advisories yet.

Fixes

Solution

No solution given by the vendor.

Workaround

No workaround given by the vendor.

References
Link Providers
http://osvdb.org/80454 cve-icon cve-icon
http://osvdb.org/80455 cve-icon cve-icon
http://osvdb.org/80456 cve-icon cve-icon
http://osvdb.org/80457 cve-icon cve-icon
http://osvdb.org/80458 cve-icon cve-icon
http://osvdb.org/80459 cve-icon cve-icon
http://osvdb.org/80460 cve-icon cve-icon
http://osvdb.org/80461 cve-icon cve-icon
http://osvdb.org/80467 cve-icon cve-icon
http://osvdb.org/80468 cve-icon cve-icon
http://osvdb.org/80469 cve-icon cve-icon
http://osvdb.org/80470 cve-icon cve-icon
http://osvdb.org/80471 cve-icon cve-icon
http://osvdb.org/80472 cve-icon cve-icon
http://www.ieee-security.org/TC/SP2012/program.html cve-icon cve-icon
http://www.securityfocus.com/archive/1/522005 cve-icon cve-icon
http://www.securityfocus.com/bid/52612 cve-icon cve-icon
History

No history.

Projects

Sign in to view the affected projects.

cve-icon MITRE

Status: PUBLISHED

Assigner: mitre

Published:

Updated: 2024-08-06T19:01:00.328Z

Reserved: 2012-02-29T00:00:00.000Z

Link: CVE-2012-1443

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Deferred

Published: 2012-03-21T10:11:48.083

Modified: 2025-04-11T00:51:21.963

Link: CVE-2012-1443

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

No data.

Weaknesses