CVE-2012-1460

CVE

Medium

The Gzip file parser in Antiy Labs AVL SDK 2.0.3.7, Quick Heal (aka Cat QuickHeal) 11.00, Command Antivirus 5.2.11.5, eSafe 7.0.17.0, F-Pro…

CVSS

4.3

Medium

EPSS

0.95

p99

Published

2012-01-01

Updated

2012-01-01

Description

The Gzip file parser in Antiy Labs AVL SDK 2.0.3.7, Quick Heal (aka Cat QuickHeal) 11.00, Command Antivirus 5.2.11.5, eSafe 7.0.17.0, F-Prot Antivirus 4.6.2.117, Jiangmin Antivirus 13.0.900, K7 AntiVirus 9.77.3565, and VBA32 3.12.14.2 allows remote attackers to bypass malware detection via a .tar.gz file with stray bytes at the end. NOTE: this may later be SPLIT into multiple CVEs if additional information is published showing that the error occurred independently in different Gzip parser implementations.

Tags · CWE

CWE-264

Affected products

EsafeVba32Avl_sdkCommand_antivirusQuick_healF-prot_antivirusJiangmin_antivirusAntivirus

CVSS vector

AV:N/AC:M/Au:N/C:N/I:P/A:N

Timeline

2012-01-01

Published

2012-01-01

Updated

CVSS 3.1 breakdown

Attack Vector

AV: N

Network (N)

Attack Complexity

AC: M

Medium

Authentication

Au: N

None (N)

Confidentiality Impact

C: N

None (N)

Integrity Impact

I: P

Partial

Availability Impact

A: N

None (N)

Exploit indicators

EPSS

0.945 · p99

Known exploited (KEV)

Known exploits — Сканер-ВС

No Сканер-ВС checks registered for this vulnerability yet.

Affected products

Product	Vendor	Status
antivirus	*	Tracked
avl_sdk	*	Tracked
command_antivirus	*	Tracked
esafe	*	Tracked
f-prot_antivirus	*	Tracked
jiangmin_antivirus	*	Tracked
quick_heal	*	Tracked
vba32	*	Tracked

Source databases

CVE