CVE-2012-1420: Medium severity authentium command antivirus vulnerability
The TAR file parser in Quick Heal (aka Cat QuickHeal) 11.00, Command Antivirus 5.2.11.5, F-Prot Antivirus 4.6.2.117, Fortinet Antivirus 4.2.254.0, K7 AntiVirus 9.77.3565, Kaspersky Anti-Virus 7.0.0.125, Antimalware Engine 1.1.6402.0 in Microsoft Security Essentials 2.0, NOD32 Antivirus 5795, Norman Antivirus 6.06.12, Panda Antivirus 10.0.2.7, and Rising Antivirus 22.83.00.03 allows remote attackers to bypass malware detection via a POSIX TAR file with an initial \7fELF character sequence. NOTE: this may later be SPLIT into multiple CVEs if additional information is published showing that the error occurred independently in different TAR parser implementations.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2012-1420?
CVE-2012-1420 is classified as a high-severity vulnerability due to its potential to allow remote code execution.
How do I fix CVE-2012-1420?
To fix CVE-2012-1420, users should update their antivirus software to the latest version provided by the vendor.
Which software is affected by CVE-2012-1420?
CVE-2012-1420 affects several antivirus software products including Quick Heal, Command Antivirus, and Kaspersky Anti-Virus.
What type of vulnerability is CVE-2012-1420?
CVE-2012-1420 is a vulnerability in the TAR file parser that can lead to remote code execution.
Can CVE-2012-1420 affect my computer's security?
Yes, CVE-2012-1420 can significantly compromise your computer's security if left unpatched.