CVEvulnerability

CVE-2012-1460

4.3 MEDIUM Published 2012-03-21 Modified 2026-06-16 Official page ↗
Status
Modified
Published
2012-03-21
Last modified
2026-06-16
Assigner
[email protected]
CVSS 2.0 ([email protected])
4.3 MEDIUM — AV:N/AC:M/Au:N/C:N/I:P/A:N
Weaknesses
CWE-264

Description

The Gzip file parser in Antiy Labs AVL SDK 2.0.3.7, Quick Heal (aka Cat QuickHeal) 11.00, Command Antivirus 5.2.11.5, eSafe 7.0.17.0, F-Prot Antivirus 4.6.2.117, Jiangmin Antivirus 13.0.900, K7 AntiVirus 9.77.3565, and VBA32 3.12.14.2 allows remote attackers to bypass malware detection via a .tar.gz file with stray bytes at the end. NOTE: this may later be SPLIT into multiple CVEs if additional information is published showing that the error occurred independently in different Gzip parser implementations.

Affected configurations

• aladdin esafe 7.0.17.0 • anti-virus vba32 3.12.14.2 • antiy avl sdk 2.0.3.7 • authentium command antivirus 5.2.11.5 • cat quick heal 11.00 • f-prot f-prot antivirus 4.6.2.117 • jiangmin jiangmin antivirus 13.0.900 • k7computing antivirus 9.77.3565

Related

Weakness · not in database (1)

References