1. Home
  2. CVE Database
  3. CVE-2012-1420
MEDIUM · 4.3

CVE-2012-1420

The TAR file parser in Quick Heal (aka Cat QuickHeal) 11.00, Command Antivirus 5.2.11.5, F-Prot Antivirus 4.6.2.117, Fortinet Antivirus 4.2.254.0, K7 AntiVirus 9.77.3565, Kaspersky Anti-Virus 7.0.0.12...

Vulnerability Description

The TAR file parser in Quick Heal (aka Cat QuickHeal) 11.00, Command Antivirus 5.2.11.5, F-Prot Antivirus 4.6.2.117, Fortinet Antivirus 4.2.254.0, K7 AntiVirus 9.77.3565, Kaspersky Anti-Virus 7.0.0.125, Antimalware Engine 1.1.6402.0 in Microsoft Security Essentials 2.0, NOD32 Antivirus 5795, Norman Antivirus 6.06.12, Panda Antivirus 10.0.2.7, and Rising Antivirus 22.83.00.03 allows remote attackers to bypass malware detection via a POSIX TAR file with an initial \7fELF character sequence. NOTE: this may later be SPLIT into multiple CVEs if additional information is published showing that the error occurred independently in different TAR parser implementations.

CVSS Score

4.3

MEDIUM

AV:N/AC:M/Au:N/C:N/I:P/A:N
Confidentiality
NONE
Integrity
PARTIAL
Availability
NONE

Affected Products

VendorProductVersions
AuthentiumCommand Antivirus5.2.11.5
CatQuick Heal11.00
EsetNod32 Antivirus5795
F-ProtF-Prot Antivirus4.6.2.117
FortinetFortinet Antivirus4.2.254.0
K7ComputingAntivirus9.77.3565
KasperskyKaspersky Anti-Virus7.0.0.125
MicrosoftSecurity Essentials2.0
NormanNorman Antivirus \& Antispyware6.06.12
PandasecurityPanda Antivirus10.0.2.7
Rising-GlobalRising Antivirus22.83.00.03

Related Weaknesses (CWE)

CWE-264

References

FAQ

What is CVE-2012-1420?

CVE-2012-1420 is a vulnerability with a CVSS score of 4.3 (MEDIUM). The TAR file parser in Quick Heal (aka Cat QuickHeal) 11.00, Command Antivirus 5.2.11.5, F-Prot Antivirus 4.6.2.117, Fortinet Antivirus 4.2.254.0, K7 AntiVirus 9.77.3565, Kaspersky Anti-Virus 7.0.0.12...

How severe is CVE-2012-1420?

CVE-2012-1420 has been rated MEDIUM with a CVSS base score of 4.3/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2012-1420?

Check the references section above for vendor advisories and patch information. Affected products include: Authentium Command Antivirus, Cat Quick Heal, Eset Nod32 Antivirus, F-Prot F-Prot Antivirus, Fortinet Fortinet Antivirus.