The TAR file parser in AVG Anti-Virus 10.0.0.1190, Quick Heal (aka Cat QuickHeal) 11.00, Comodo Antivirus 7424, Emsisoft Anti-Malware 5.1.0.1, eSafe 7.0.17.0, F-Prot Antivirus 4.6.2.117, Fortinet Antivirus 4.2.254.0, Ikarus Virus Utilities T3 Command Line Scanner 1.1.97.0, Jiangmin Antivirus 13.0.900, Kaspersky Anti-Virus 7.0.0.125, McAfee Anti-Virus Scanning Engine 5.400.0.1158, McAfee Gateway (formerly Webwasher) 2010.1C, NOD32 Antivirus 5795, Norman Antivirus 6.06.12, Panda Antivirus 10.0.2.7, Rising Antivirus 22.83.00.03, Sophos Anti-Virus 4.61.0, AVEngine 20101.3.0.103 in Symantec Endpoint Protection 11, Trend Micro AntiVirus 9.120.0.1004, and Trend Micro HouseCall 9.120.0.1004 allows remote attackers to bypass malware detection via a TAR file with an appended ZIP file. NOTE: this may later be SPLIT into multiple CVEs if additional information is published showing that the error occurred independently in different TAR parser implementations.

No CVSS v4.0

No CVSS v3.1

No CVSS v3.0

Access Vector Network

Access Complexity Medium

Authentication None

Confidentiality Impact None

Integrity Impact Partial

Availability Impact None

This CVE is not in the KEV list.

The EPSS score is 0.18248.

Key SSVC decision points have not yet been added.

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor Product Default status Versions
n/a n/a affected
Version Status Constraints
n/a affected —

Configuration 1 [-]

OR cpe:2.3:a:aladdin:esafe:7.0.17.0:*:*:*:*:*:*:*
cpe:2.3:a:avg:avg_anti-virus:10.0.0.1190:*:*:*:*:*:*:*
cpe:2.3:a:cat:quick_heal:11.00:*:*:*:*:*:*:*
cpe:2.3:a:comodo:comodo_antivirus:7424:*:*:*:*:*:*:*
cpe:2.3:a:emsisoft:anti-malware:5.1.0.1:*:*:*:*:*:*:*
cpe:2.3:a:eset:nod32_antivirus:5795:*:*:*:*:*:*:*
cpe:2.3:a:f-prot:f-prot_antivirus:4.6.2.117:*:*:*:*:*:*:*
cpe:2.3:a:fortinet:fortinet_antivirus:4.2.254.0:*:*:*:*:*:*:*
cpe:2.3:a:ikarus:ikarus_virus_utilities_t3_command_line_scanner:1.1.97.0:*:*:*:*:*:*:*
cpe:2.3:a:jiangmin:jiangmin_antivirus:13.0.900:*:*:*:*:*:*:*
cpe:2.3:a:kaspersky:kaspersky_anti-virus:7.0.0.125:*:*:*:*:*:*:*
cpe:2.3:a:mcafee:gateway:2010.1c:*:*:*:*:*:*:*
cpe:2.3:a:mcafee:scan_engine:5.400.0.1158:*:*:*:*:*:*:*
cpe:2.3:a:norman:norman_antivirus_\&_antispyware:6.06.12:*:*:*:*:*:*:*
cpe:2.3:a:pandasecurity:panda_antivirus:10.0.2.7:*:*:*:*:*:*:*
cpe:2.3:a:rising-global:rising_antivirus:22.83.00.03:*:*:*:*:*:*:*
cpe:2.3:a:sophos:sophos_anti-virus:4.61.0:*:*:*:*:*:*:*
cpe:2.3:a:symantec:endpoint_protection:11.0:*:*:*:*:*:*:*
cpe:2.3:a:trendmicro:housecall:9.120.0.1004:*:*:*:*:*:*:*
cpe:2.3:a:trendmicro:trend_micro_antivirus:9.120.0.1004:*:*:*:*:*:*:*

No data.

No data.

Project Subscriptions

Vendors Products
Aladdin Subscribe
Esafe Subscribe
Avg Subscribe
Avg Anti-virus Subscribe
Cat Subscribe
Quick Heal Subscribe
Comodo Subscribe
Comodo Antivirus Subscribe
Emsisoft Subscribe
Anti-malware Subscribe
Eset Subscribe
Nod32 Antivirus Subscribe
F-prot Subscribe
F-prot Antivirus Subscribe
Fortinet Subscribe
Fortinet Antivirus Subscribe
Ikarus Subscribe
Ikarus Virus Utilities T3 Command Line Scanner Subscribe
Jiangmin Subscribe
Jiangmin Antivirus Subscribe
Kaspersky Subscribe
Kaspersky Anti-virus Subscribe
Mcafee Subscribe
Gateway Subscribe
Scan Engine Subscribe
Norman Subscribe
Norman Antivirus \& Antispyware Subscribe
Pandasecurity Subscribe
Panda Antivirus Subscribe
Rising-global Subscribe
Rising Antivirus Subscribe
Sophos Subscribe
Sophos Anti-virus Subscribe
Symantec Subscribe
Endpoint Protection Subscribe
Trendmicro Subscribe
Housecall Subscribe
Trend Micro Antivirus Subscribe
Advisories

No advisories yet.

Fixes

Solution

No solution given by the vendor.

Workaround

No workaround given by the vendor.

References
Link Providers
http://osvdb.org/80389 cve-icon cve-icon
http://osvdb.org/80390 cve-icon cve-icon
http://osvdb.org/80391 cve-icon cve-icon
http://osvdb.org/80395 cve-icon cve-icon
http://osvdb.org/80396 cve-icon cve-icon
http://osvdb.org/80403 cve-icon cve-icon
http://osvdb.org/80406 cve-icon cve-icon
http://osvdb.org/80409 cve-icon cve-icon
http://www.ieee-security.org/TC/SP2012/program.html cve-icon cve-icon
http://www.securityfocus.com/archive/1/522005 cve-icon cve-icon
http://www.securityfocus.com/bid/52608 cve-icon cve-icon
https://exchange.xforce.ibmcloud.com/vulnerabilities/74289 cve-icon cve-icon
History

No history.

Projects

Sign in to view the affected projects.

cve-icon MITRE

Status: PUBLISHED

Assigner: mitre

Published:

Updated: 2024-08-06T19:01:00.493Z

Reserved: 2012-02-29T00:00:00

Link: CVE-2012-1456

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Deferred

Published: 2012-03-21T10:11:49.240

Modified: 2025-04-11T00:51:21.963

Link: CVE-2012-1456

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

No data.

Weaknesses