CVE-2012-1421
First published: Wed Mar 21 2012(Updated: )
The TAR file parser in Quick Heal (aka Cat QuickHeal) 11.00, Norman Antivirus 6.06.12, Rising Antivirus 22.83.00.03, and AVEngine 20101.3.0.103 in Symantec Endpoint Protection 11 allows remote attackers to bypass malware detection via a POSIX TAR file with an initial MSCF character sequence. NOTE: this may later be SPLIT into multiple CVEs if additional information is published showing that the error occurred independently in different TAR parser implementations.
Credit: cve@mitre.org
| Affected Software | Affected Version | How to fix |
|---|---|---|
| QuickHeal CAT QuickHeal | =11.00 | |
| Norman Antivirus & Antispyware | =6.06.12 | |
| Rising Antivirus | =22.83.00.03 | |
| Symantec Endpoint Protection | =11.0 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the severity of CVE-2012-1421?
CVE-2012-1421 is classified as a high severity vulnerability, allowing remote attackers to bypass malware detection.
How do I fix CVE-2012-1421?
Fixing CVE-2012-1421 requires updating to the latest version of the affected software, as patches are generally released by the vendors.
Which software is affected by CVE-2012-1421?
CVE-2012-1421 affects Quick Heal 11.00, Norman Antivirus 6.06.12, Rising Antivirus 22.83.00.03, and Symantec Endpoint Protection 11.
What type of attack does CVE-2012-1421 enable?
CVE-2012-1421 enables remote attackers to bypass malware detection using a specially crafted POSIX TAR file.
Can CVE-2012-1421 be exploited remotely?
Yes, CVE-2012-1421 can be exploited remotely by attackers to avoid detection of malicious files.
- agent/type
- agent/softwarecombine
- collector/mitre-cve
- source/MITRE
- agent/severity
- agent/last-modified-date
- agent/author
- agent/weakness
- agent/references
- agent/description
- agent/first-publish-date
- agent/event
- agent/source
- agent/tags
- collector/nvd-index
- agent/software-canonical-lookup-request
- vendor/cat
- canonical/quickheal cat quickheal
- version/quickheal cat quickheal/11.00
- vendor/norman
- canonical/norman antivirus & antispyware
- version/norman antivirus & antispyware/6.06.12
- vendor/rising-global
- canonical/rising antivirus
- version/rising antivirus/22.83.00.03
- vendor/symantec
- canonical/symantec endpoint protection
- version/symantec endpoint protection/11.0