4.3

CVE-2012-1460

The Gzip file parser in Antiy Labs AVL SDK 2.0.3.7, Quick Heal (aka Cat QuickHeal) 11.00, Command Antivirus 5.2.11.5, eSafe 7.0.17.0, F-Prot Antivirus 4.6.2.117, Jiangmin Antivirus 13.0.900, K7 AntiVirus 9.77.3565, and VBA32 3.12.14.2 allows remote attackers to bypass malware detection via a .tar.gz file with stray bytes at the end. NOTE: this may later be SPLIT into multiple CVEs if additional information is published showing that the error occurred independently in different Gzip parser implementations.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Aladdin ≫ Esafe Version 7.0.17.0
Anti-virus ≫ Vba32 Version 3.12.14.2
Antiy ≫ Avl Sdk Version 2.0.3.7
Authentium ≫ Command Antivirus Version 5.2.11.5
Cat ≫ Quick Heal Version 11.00
F-prot ≫ F-prot Antivirus Version 4.6.2.117
Jiangmin ≫ Jiangmin Antivirus Version 13.0.900
K7computing ≫ Antivirus Version 9.77.3565
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 94.43% 0.998
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 4.3 8.6 2.9
AV:N/AC:M/Au:N/C:N/I:P/A:N
Es wurden noch keine Informationen zu CWE veröffentlicht.
http://www.ieee-security.org/TC/SP2012/program.html
http://www.securityfocus.com/archive/1/522005
http://www.securityfocus.com/bid/52629
https://exchange.xforce.ibmcloud.com/vulnerabilities/74308