Vulnerability CVE-2012-1443

Published: 2012-03-21

The RAR file parser in ClamAV 0.96.4, Rising Antivirus, Quick Heal (aka Cat QuickHeal) 11.00, G Data AntiVirus 21, AVEngine 20101.3.0.103 in Symantec Endpoint Protection 11, Command Antivirus, Ikarus Virus Utilities T3 Command Line Scanner, Emsisoft Anti-Malware, PC Tools AntiVirus, F-Prot Antivirus, VirusBuster, Fortinet Antivirus, Antiy Labs AVL SDK, K7 AntiVirus 9.77.3565, Trend Micro HouseCall, Kaspersky Anti-Virus, Jiangmin Antivirus 13.0.900, Antimalware Engine 1.1.6402.0 in Microsoft Security Essentials 2.0, Sophos Anti-Virus 4.61.0, NOD32 Antivirus 5795, Avira AntiVir, Norman Antivirus 6.06.12, McAfee Anti-Virus Scanning Engine 5.400.0.1158, Panda Antivirus, McAfee Gateway (formerly Webwasher) 2010.1C, Trend Micro AntiVirus, Comodo Antivirus 7424, Bitdefender 7.2, eSafe, F-Secure Anti-Virus 9.0.16160.0, nProtect A! nti-Virus 2011-01-17.01, AhnLab V3 Internet Security 2011.01.18.00, AVG Anti-Virus, avast! Antivirus 4.8.1351.0 and 5.0.677.0, and VBA32 allows user-assisted remote attackers to bypass malware detection via a RAR file with an initial MZ character sequence. NOTE: this may later be SPLIT into multiple CVEs if additional information is published showing that the error occurred independently in different RAR parser implementations.



(Permissions, Privileges, and Access Controls)

CVSS2 => (AV:N/AC:M/Au:N/C:N/I:P/A:N)

CVSS Base Score
Impact Subscore
Exploitability Subscore
Exploit range
Attack complexity
No required
Confidentiality impact
Integrity impact
Availability impact
Affected software
Virusbuster -> Virusbuster 
Trendmicro -> Housecall 
Trendmicro -> Trend micro antivirus 
Symantec -> Endpoint protection 
Sophos -> Sophos anti-virus 
Rising-global -> Rising antivirus 
Pc tools -> Pc tools antivirus 
Pandasecurity -> Panda antivirus 
Nprotect -> Nprotect antivirus 
Norman -> Norman antivirus & antispyware 
Microsoft -> Security essentials 
Mcafee -> Gateway 
Mcafee -> Scan engine 
Kaspersky -> Kaspersky anti-virus 
K7computing -> Antivirus 
Jiangmin -> Jiangmin antivirus 
Ikarus -> Ikarus virus utilities t3 command line scanner 
Gdata-software -> G data antivirus 
Fortinet -> Fortinet antivirus 
F-secure -> F-secure anti-virus 
F-prot -> F-prot antivirus 
ESET -> Nod32 antivirus 
Emsisoft -> Anti-malware 
Comodo -> Comodo antivirus 
Clamav -> Clamav 
CAT -> Quick heal 
Bitdefender -> Bitdefender 
Avira -> Antivir 
AVG -> Avg anti-virus 
Authentium -> Command antivirus 
Antiy -> Avl sdk 
Anti-virus -> Vba32 
Alwil -> Avast antivirus 
Aladdin -> Esafe 
Ahnlab -> V3 internet security 


Copyright 2024,


Back to Top