CVE-2012-1424: Medium severity antiy avl sdk vulnerability
The TAR file parser in Antiy Labs AVL SDK 2.0.3.7, Quick Heal (aka Cat QuickHeal) 11.00, Jiangmin Antivirus 13.0.900, Norman Antivirus 6.06.12, PC Tools AntiVirus 7.0.3.5, and Sophos Anti-Virus 4.61.0 allows remote attackers to bypass malware detection via a POSIX TAR file with a \19\04\00\10 character sequence at a certain location. NOTE: this may later be SPLIT into multiple CVEs if additional information is published showing that the error occurred independently in different TAR parser implementations.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2012-1424?
CVE-2012-1424 is considered a high severity vulnerability as it allows attackers to bypass malware detection.
How do I fix CVE-2012-1424?
To fix CVE-2012-1424, update affected antivirus software to the latest version provided by the vendor.
Which software is affected by CVE-2012-1424?
CVE-2012-1424 affects Antiy AVL SDK 2.0.3.7, Quick Heal 11.00, Jiangmin Antivirus 13.0.900, Norman Antivirus 6.06.12, PC Tools AntiVirus 7.0.3.5, and Sophos Anti-Virus 4.61.0.
Can CVE-2012-1424 be exploited remotely?
Yes, CVE-2012-1424 can be exploited remotely by attackers through a specially crafted POSIX TAR file.
What is the impact of CVE-2012-1424 on my system?
The impact of CVE-2012-1424 is that it allows malicious files to evade detection, potentially compromising system security.