4.3

CVE-2012-1456

The TAR file parser in AVG Anti-Virus 10.0.0.1190, Quick Heal (aka Cat QuickHeal) 11.00, Comodo Antivirus 7424, Emsisoft Anti-Malware 5.1.0.1, eSafe 7.0.17.0, F-Prot Antivirus 4.6.2.117, Fortinet Antivirus 4.2.254.0, Ikarus Virus Utilities T3 Command Line Scanner 1.1.97.0, Jiangmin Antivirus 13.0.900, Kaspersky Anti-Virus 7.0.0.125, McAfee Anti-Virus Scanning Engine 5.400.0.1158, McAfee Gateway (formerly Webwasher) 2010.1C, NOD32 Antivirus 5795, Norman Antivirus 6.06.12, Panda Antivirus 10.0.2.7, Rising Antivirus 22.83.00.03, Sophos Anti-Virus 4.61.0, AVEngine 20101.3.0.103 in Symantec Endpoint Protection 11, Trend Micro AntiVirus 9.120.0.1004, and Trend Micro HouseCall 9.120.0.1004 allows remote attackers to bypass malware detection via a TAR file with an appended ZIP file.  NOTE: this may later be SPLIT into multiple CVEs if additional information is published showing that the error occurred independently in different TAR parser implementations.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Aladdin ≫ Esafe Version 7.0.17.0
Avg ≫ Avg Anti-virus Version 10.0.0.1190
Cat ≫ Quick Heal Version 11.00
Comodo ≫ Comodo Antivirus Version 7424
Emsisoft ≫ Anti-malware Version 5.1.0.1
Eset ≫ Nod32 Antivirus Version 5795
F-prot ≫ F-prot Antivirus Version 4.6.2.117
Fortinet ≫ Fortinet Antivirus Version 4.2.254.0
Jiangmin ≫ Jiangmin Antivirus Version 13.0.900
Kaspersky ≫ Kaspersky Anti-virus Version 7.0.0.125
Mcafee ≫ Gateway Version 2010.1c
Mcafee ≫ Scan Engine Version 5.400.0.1158
Pandasecurity ≫ Panda Antivirus Version 10.0.2.7
Rising-global ≫ Rising Antivirus Version 22.83.00.03
Sophos ≫ Sophos Anti-virus Version 4.61.0
Symantec ≫ Endpoint Protection Version 11.0
Trendmicro ≫ Housecall Version 9.120.0.1004
Trendmicro ≫ Trend Micro Antivirus Version 9.120.0.1004
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 99.93% 1
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 4.3 8.6 2.9
AV:N/AC:M/Au:N/C:N/I:P/A:N
Es wurden noch keine Informationen zu CWE veröffentlicht.
http://osvdb.org/80409
http://www.ieee-security.org/TC/SP2012/program.html
http://www.securityfocus.com/archive/1/522005
http://osvdb.org/80403
http://osvdb.org/80406
http://osvdb.org/80395
http://osvdb.org/80396
http://osvdb.org/80390
http://osvdb.org/80391
http://osvdb.org/80389
http://www.securityfocus.com/bid/52608
https://exchange.xforce.ibmcloud.com/vulnerabilities/74289