CVEvulnerability
CVE-2012-1424
4.3 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2012-03-21
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 4.3 MEDIUM — AV:N/AC:M/Au:N/C:N/I:P/A:N
- Weaknesses
- CWE-264
Description
The TAR file parser in Antiy Labs AVL SDK 2.0.3.7, Quick Heal (aka Cat QuickHeal) 11.00, Jiangmin Antivirus 13.0.900, Norman Antivirus 6.06.12, PC Tools AntiVirus 7.0.3.5, and Sophos Anti-Virus 4.61.0 allows remote attackers to bypass malware detection via a POSIX TAR file with a \19\04\00\10 character sequence at a certain location. NOTE: this may later be SPLIT into multiple CVEs if additional information is published showing that the error occurred independently in different TAR parser implementations.
Affected configurations
• antiy avl sdk 2.0.3.7
• cat quick heal 11.00
• jiangmin jiangmin antivirus 13.0.900
• norman norman antivirus \& antispyware 6.06.12
• pc tools pc tools antivirus 7.0.3.5
• sophos sophos anti-virus 4.61.0
Related
Weakness · not in database (1)
References
- http://osvdb.org/80390 osvdb.org
- http://osvdb.org/80391 osvdb.org
- http://osvdb.org/80392 osvdb.org
- http://osvdb.org/80409 osvdb.org
- http://www.ieee-security.org/TC/SP2012/program.html www.ieee-security.org
- http://www.securityfocus.com/archive/1/522005 www.securityfocus.com
- http://osvdb.org/80390 osvdb.org
- http://osvdb.org/80391 osvdb.org
- http://osvdb.org/80392 osvdb.org
- http://osvdb.org/80409 osvdb.org
- http://www.ieee-security.org/TC/SP2012/program.html www.ieee-security.org
- http://www.securityfocus.com/archive/1/522005 www.securityfocus.com