Vulnerability CVE-2012-1459

Published: 2012-03-21

The TAR file parser in AhnLab V3 Internet Security 2011.01.18.00, Avira AntiVir, Antiy Labs AVL SDK, avast! Antivirus 4.8.1351.0 and 5.0.677.0, AVG Anti-Virus, Bitdefender 7.2, Quick Heal (aka Cat QuickHeal) 11.00, ClamAV 0.96.4, Command Antivirus, Comodo Antivirus 7424, Emsisoft Anti-Malware, F-Prot Antivirus, F-Secure Anti-Virus 9.0.16160.0, Fortinet Antivirus, G Data AntiVirus 21, Ikarus Virus Utilities T3 Command Line Scanner, Jiangmin Antivirus 13.0.900, K7 AntiVirus 9.77.3565, Kaspersky Anti-Virus, McAfee Anti-Virus Scanning Engine 5.400.0.1158, McAfee Gateway (formerly Webwasher) 2010.1C, Antimalware Engine 1.1.6402.0 in Microsoft Security Essentials 2.0, NOD32 Antivirus 5795, Norman Antivirus 6.06.12, nProtect Anti-Virus 2011-01-17.01, Panda Antivirus, PC Tools AntiVirus, Rising Antivirus, Sophos Anti-Virus 4.61.0, AVEngine 20101.3.0.103 in Symantec Endpoint Protection 11, Trend Micro AntiVirus, Trend Micro HouseCall, VBA32, and VirusBuster allows remote attackers to bypass malware detection via a TAR archive entry with a length field corresponding to that entire entry, plus part of the header of the next entry. NOTE: this may later be SPLIT into multiple CVEs if additional information is published showing that the error occurred independently in different TAR parser implementations.



(Permissions, Privileges, and Access Controls)

CVSS2 => (AV:N/AC:M/Au:N/C:N/I:P/A:N)

CVSS Base Score
Impact Subscore
Exploitability Subscore
Exploit range
Attack complexity
No required
Confidentiality impact
Integrity impact
Availability impact
Affected software
Virusbuster -> Virusbuster 
Trendmicro -> Housecall 
Trendmicro -> Trend micro antivirus 
Symantec -> Endpoint protection 
Sophos -> Sophos anti-virus 
Rising-global -> Rising antivirus 
Pc tools -> Pc tools antivirus 
Pandasecurity -> Panda antivirus 
Nprotect -> Nprotect antivirus 
Norman -> Norman antivirus & antispyware 
Microsoft -> Security essentials 
Mcafee -> Gateway 
Mcafee -> Scan engine 
Kaspersky -> Kaspersky anti-virus 
K7computing -> Antivirus 
Jiangmin -> Jiangmin antivirus 
Ikarus -> Ikarus virus utilities t3 command line scanner 
Gdata-software -> G data antivirus 
Fortinet -> Fortinet antivirus 
F-secure -> F-secure anti-virus 
F-prot -> F-prot antivirus 
ESET -> Nod32 antivirus 
Emsisoft -> Anti-malware 
Comodo -> Comodo antivirus 
Clamav -> Clamav 
CAT -> Quick heal 
Bitdefender -> Bitdefender 
Avira -> Antivir 
AVG -> Avg anti-virus 
Authentium -> Command antivirus 
Antiy -> Avl sdk 
Anti-virus -> Vba32 
Alwil -> Avast antivirus 
Ahnlab -> V3 internet security 


Copyright 2024,


Back to Top