The TAR file parser in Avira AntiVir 7.11.1.163, Antiy Labs AVL SDK 2.0.3.7, avast! Antivirus 4.8.1351.0 and 5.0.677.0, AVG Anti-Virus 10.0.0.1190, Bitdefender 7.2, Quick Heal (aka Cat QuickHeal) 11.00, ClamAV 0.96.4, Command Antivirus 5.2.11.5, Emsisoft Anti-Malware 5.1.0.1, eSafe 7.0.17.0, F-Prot Antivirus 4.6.2.117, G Data AntiVirus 21, Ikarus Virus Utilities T3 Command Line Scanner 1.1.97.0, Jiangmin Antivirus 13.0.900, K7 AntiVirus 9.77.3565, Kaspersky Anti-Virus 7.0.0.125, McAfee Anti-Virus Scanning Engine 5.400.0.1158, McAfee Gateway (formerly Webwasher) 2010.1C, Antimalware Engine 1.1.6402.0 in Microsoft Security Essentials 2.0, NOD32 Antivirus 5795, Norman Antivirus 6.06.12, PC Tools AntiVirus 7.0.3.5, Rising Antivirus 22.83.00.03, AVEngine 20101.3.0.103 in Symantec Endpoint Protection 11, Trend Micro AntiVirus 9.120.0.1004, Trend Micro HouseCall 9.120.0.1004, VBA32 3.12.14.2, and VirusBuster 13.6.151.0 allows remote attackers to bypass malware detection via a TAR archive entry with a length field that exceeds the total TAR file size. NOTE: this may later be SPLIT into multiple CVEs if additional information is published showing that the error occurred independently in different TAR parser implementations.

Project Subscriptions

Vendors Products
Aladdin Subscribe
Avast Antivirus Subscribe
Anti-virus Subscribe
Avl Sdk Subscribe
Authentium Subscribe
Command Antivirus Subscribe
Avg Anti-virus Subscribe
Antivir Subscribe
Bitdefender Subscribe
Bitdefender Subscribe
Quick Heal Subscribe
Emsisoft Subscribe
Anti-malware Subscribe
Nod32 Antivirus Subscribe
F-prot Antivirus Subscribe
Gdata-software Subscribe
G Data Antivirus Subscribe
Ikarus Virus Utilities T3 Command Line Scanner Subscribe
Jiangmin Subscribe
Jiangmin Antivirus Subscribe
K7computing Subscribe
Antivirus Subscribe
Kaspersky Subscribe
Kaspersky Anti-virus Subscribe
Gateway Subscribe
Scan Engine Subscribe
Microsoft Subscribe
Security Essentials Subscribe
Norman Antivirus \& Antispyware Subscribe
Pc Tools Subscribe
Pc Tools Antivirus Subscribe
Rising-global Subscribe
Rising Antivirus Subscribe
Symantec Subscribe
Endpoint Protection Subscribe
Trendmicro Subscribe
Housecall Subscribe
Trend Micro Antivirus Subscribe
Virusbuster Subscribe
Virusbuster Subscribe
Advisories
Source ID Title
Ubuntu USN Ubuntu USN USN-1482-1 ClamAV vulnerabilities
Fixes

Solution

No solution given by the vendor.


Workaround

No workaround given by the vendor.

History

No history.

Projects

Sign in to view the affected projects.

cve-icon MITRE

Status: PUBLISHED

Assigner: mitre

Published:

Updated: 2024-08-06T19:01:00.540Z

Reserved: 2012-02-29T00:00:00.000Z

Link: CVE-2012-1457

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Deferred

Published: 2012-03-21T10:11:49.287

Modified: 2025-04-11T00:51:21.963

Link: CVE-2012-1457

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

No data.

Weaknesses