CVE-2012-1448: Medium severity Cat Quick Heal vulnerability

Published Mar 21, 2012
·
Updated

The CAB file parser in Quick Heal (aka Cat QuickHeal) 11.00, Trend Micro AntiVirus 9.120.0.1004, Ikarus Virus Utilities T3 Command Line Scanner 1.1.97.0, Trend Micro HouseCall 9.120.0.1004, and Emsisoft Anti-Malware 5.1.0.1 allows remote attackers to bypass malware detection via a CAB file with a modified cbCabinet field. NOTE: this may later be SPLIT into multiple CVEs if additional information is published showing that the error occurred independently in different CAB parser implementations.

Affected Software

5 affected components
Cat Quick Heal=11.00
Emsisoft Anti-Malware=5.1.0.1
Ikarus Ikarus Virus Utilities T3 Command Line Scanner=1.1.97.0
trendmicro Housecall=9.120.0.1004
trendmicro Trend Micro Antivirus=9.120.0.1004

Event History

Mar 21, 2012
CVE Published
via MITRE·10:00 AM
Data Sourced
via MITRE·10:00 AM
Description
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Frequently Asked Questions

1

What is the severity of CVE-2012-1448?

CVE-2012-1448 is classified as a medium severity vulnerability due to its potential to allow a bypass of malware detection methods.

2

How do I fix CVE-2012-1448?

Fixing CVE-2012-1448 involves updating the affected software to the latest version provided by the vendor.

3

Which software is affected by CVE-2012-1448?

CVE-2012-1448 affects Quick Heal 11.00, several versions of Trend Micro Antivirus and HouseCall, Ikarus Virus Utilities T3 Command Line Scanner 1.1.97.0, and Emsisoft Anti-Malware 5.1.0.1.

4

What is the exploit method for CVE-2012-1448?

The exploit method for CVE-2012-1448 involves using a malicious CAB file to bypass malware detection in the affected antivirus software.

5

Can CVE-2012-1448 lead to further compromises?

Yes, if exploited, CVE-2012-1448 can lead to a potential compromise of the system as it allows malware to evade detection.

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2026 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203