CVE-2012-1426: Medium severity authentium command antivirus vulnerability
The TAR file parser in Quick Heal (aka Cat QuickHeal) 11.00, Command Antivirus 5.2.11.5, F-Prot Antivirus 4.6.2.117, K7 AntiVirus 9.77.3565, Norman Antivirus 6.06.12, and Rising Antivirus 22.83.00.03 allows remote attackers to bypass malware detection via a POSIX TAR file with an initial \42\5A\68 character sequence. NOTE: this may later be SPLIT into multiple CVEs if additional information is published showing that the error occurred independently in different TAR parser implementations.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2012-1426?
CVE-2012-1426 is classified as a high severity vulnerability due to its ability to allow remote attackers to bypass malware detection.
Which antivirus products are affected by CVE-2012-1426?
CVE-2012-1426 affects Quick Heal 11.00, Command Antivirus 5.2.11.5, F-Prot Antivirus 4.6.2.117, K7 AntiVirus 9.77.3565, Norman Antivirus 6.06.12, and Rising Antivirus 22.83.00.03.
How can I mitigate CVE-2012-1426?
Mitigation for CVE-2012-1426 involves updating the affected antivirus software to the latest version provided by the vendors.
What type of attack is associated with CVE-2012-1426?
CVE-2012-1426 is associated with remote code execution attacks that exploit vulnerabilities in the TAR file parser.
What is the impact of exploiting CVE-2012-1426?
Exploiting CVE-2012-1426 can lead to malware being executed undetected on the affected systems.