CVE-2012-1453: Medium severity Antiy AVL SDK vulnerability
The CAB file parser in Dr.Web 5.0.2.03300, Trend Micro HouseCall 9.120.0.1004, Kaspersky Anti-Virus 7.0.0.125, Sophos Anti-Virus 4.61.0, Trend Micro AntiVirus 9.120.0.1004, McAfee Gateway (formerly Webwasher) 2010.1C, Emsisoft Anti-Malware 5.1.0.1, CA eTrust Vet Antivirus 36.1.8511, Antiy Labs AVL SDK 2.0.3.7, Antimalware Engine 1.1.6402.0 in Microsoft Security Essentials 2.0, Rising Antivirus 22.83.00.03, Ikarus Virus Utilities T3 Command Line Scanner 1.1.97.0, Fortinet Antivirus 4.2.254.0, and Panda Antivirus 10.0.2.7 allows remote attackers to bypass malware detection via a CAB file with a modified coffFiles field. NOTE: this may later be SPLIT into multiple CVEs if additional information is published showing that the error occurred independently in different CAB parser implementations.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2012-1453?
CVE-2012-1453 has been assigned a severity rating that indicates potential risk to the affected antivirus applications.
How do I fix CVE-2012-1453?
To fix CVE-2012-1453, ensure that you update the affected antivirus software to the latest version provided by the vendor.
Which software is affected by CVE-2012-1453?
CVE-2012-1453 affects several antivirus products, including Dr.Web, Kaspersky Anti-Virus, and Trend Micro Antivirus, among others.
Is CVE-2012-1453 an exploitable vulnerability?
Yes, CVE-2012-1453 is considered an exploitable vulnerability that can allow attackers to execute arbitrary code via malformed CAB files.
When was CVE-2012-1453 disclosed?
CVE-2012-1453 was disclosed in 2012 and is associated with security risks in older versions of several antivirus products.