CVE-2012-1421: Medium severity quickheal cat quickheal vulnerability
The TAR file parser in Quick Heal (aka Cat QuickHeal) 11.00, Norman Antivirus 6.06.12, Rising Antivirus 22.83.00.03, and AVEngine 20101.3.0.103 in Symantec Endpoint Protection 11 allows remote attackers to bypass malware detection via a POSIX TAR file with an initial MSCF character sequence. NOTE: this may later be SPLIT into multiple CVEs if additional information is published showing that the error occurred independently in different TAR parser implementations.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2012-1421?
CVE-2012-1421 is classified as a high severity vulnerability, allowing remote attackers to bypass malware detection.
How do I fix CVE-2012-1421?
Fixing CVE-2012-1421 requires updating to the latest version of the affected software, as patches are generally released by the vendors.
Which software is affected by CVE-2012-1421?
CVE-2012-1421 affects Quick Heal 11.00, Norman Antivirus 6.06.12, Rising Antivirus 22.83.00.03, and Symantec Endpoint Protection 11.
What type of attack does CVE-2012-1421 enable?
CVE-2012-1421 enables remote attackers to bypass malware detection using a specially crafted POSIX TAR file.
Can CVE-2012-1421 be exploited remotely?
Yes, CVE-2012-1421 can be exploited remotely by attackers to avoid detection of malicious files.