CVE-2012-1457

The TAR file parser in Avira AntiVir 7.11.1.163, Antiy Labs AVL SDK 2.0.3.7, avast! Antivirus 4.8.1351.0 and 5.0.677.0, AVG Anti-Virus 10.0.0.1190, Bitdefender 7.2, Quick Heal (aka Cat QuickHeal) 11.00, ClamAV 0.96.4, Command Antivirus 5.2.11.5, Emsisoft Anti-Malware 5.1.0.1, eSafe 7.0.17.0, F-Prot Antivirus 4.6.2.117, G Data AntiVirus 21, Ikarus Virus Utilities T3 Command Line Scanner 1.1.97.0, Jiangmin Antivirus 13.0.900, K7 AntiVirus 9.77.3565, Kaspersky Anti-Virus 7.0.0.125, McAfee Anti-Virus Scanning Engine 5.400.0.1158, McAfee Gateway (formerly Webwasher) 2010.1C, Antimalware Engine 1.1.6402.0 in Microsoft Security Essentials 2.0, NOD32 Antivirus 5795, Norman Antivirus 6.06.12, PC Tools AntiVirus 7.0.3.5, Rising Antivirus 22.83.00.03, AVEngine 20101.3.0.103 in Symantec Endpoint Protection 11, Trend Micro AntiVirus 9.120.0.1004, Trend Micro HouseCall 9.120.0.1004, VBA32 3.12.14.2, and VirusBuster 13.6.151.0 allows remote attackers to bypass malware detection via a TAR archive entry with a length field that exceeds the total TAR file size. NOTE: this may later be SPLIT into multiple CVEs if additional information is published showing that the error occurred independently in different TAR parser implementations.
Configurations

Configuration 1 (hide)

OR cpe:2.3:a:aladdin:esafe:7.0.17.0:*:*:*:*:*:*:*
cpe:2.3:a:alwil:avast_antivirus:4.8.1351.0:*:*:*:*:*:*:*
cpe:2.3:a:alwil:avast_antivirus:5.0.677.0:*:*:*:*:*:*:*
cpe:2.3:a:anti-virus:vba32:3.12.14.2:*:*:*:*:*:*:*
cpe:2.3:a:antiy:avl_sdk:2.0.3.7:*:*:*:*:*:*:*
cpe:2.3:a:authentium:command_antivirus:5.2.11.5:*:*:*:*:*:*:*
cpe:2.3:a:avg:avg_anti-virus:10.0.0.1190:*:*:*:*:*:*:*
cpe:2.3:a:avira:antivir:7.11.1.163:*:*:*:*:*:*:*
cpe:2.3:a:bitdefender:bitdefender:7.2:*:*:*:*:*:*:*
cpe:2.3:a:cat:quick_heal:11.00:*:*:*:*:*:*:*
cpe:2.3:a:clamav:clamav:0.96.4:*:*:*:*:*:*:*
cpe:2.3:a:emsisoft:anti-malware:5.1.0.1:*:*:*:*:*:*:*
cpe:2.3:a:eset:nod32_antivirus:5795:*:*:*:*:*:*:*
cpe:2.3:a:f-prot:f-prot_antivirus:4.6.2.117:*:*:*:*:*:*:*
cpe:2.3:a:gdata-software:g_data_antivirus:21:*:*:*:*:*:*:*
cpe:2.3:a:ikarus:ikarus_virus_utilities_t3_command_line_scanner:1.1.97.0:*:*:*:*:*:*:*
cpe:2.3:a:jiangmin:jiangmin_antivirus:13.0.900:*:*:*:*:*:*:*
cpe:2.3:a:k7computing:antivirus:9.77.3565:*:*:*:*:*:*:*
cpe:2.3:a:kaspersky:kaspersky_anti-virus:7.0.0.125:*:*:*:*:*:*:*
cpe:2.3:a:mcafee:gateway:2010.1c:*:*:*:*:*:*:*
cpe:2.3:a:mcafee:scan_engine:5.400.0.1158:*:*:*:*:*:*:*
cpe:2.3:a:microsoft:security_essentials:2.0:*:*:*:*:*:*:*
cpe:2.3:a:norman:norman_antivirus_\&_antispyware:6.06.12:*:*:*:*:*:*:*
cpe:2.3:a:pc_tools:pc_tools_antivirus:7.0.3.5:*:*:*:*:*:*:*
cpe:2.3:a:rising-global:rising_antivirus:22.83.00.03:*:*:*:*:*:*:*
cpe:2.3:a:symantec:endpoint_protection:11.0:*:*:*:*:*:*:*
cpe:2.3:a:trendmicro:housecall:9.120.0.1004:*:*:*:*:*:*:*
cpe:2.3:a:trendmicro:trend_micro_antivirus:9.120.0.1004:*:*:*:*:*:*:*
cpe:2.3:a:virusbuster:virusbuster:13.6.151.0:*:*:*:*:*:*:*

History

21 Nov 2024, 01:37

Type Values Removed Values Added
References () http://lists.opensuse.org/opensuse-security-announce/2012-07/msg00002.html - () http://lists.opensuse.org/opensuse-security-announce/2012-07/msg00002.html -
References () http://osvdb.org/80389 - () http://osvdb.org/80389 -
References () http://osvdb.org/80391 - () http://osvdb.org/80391 -
References () http://osvdb.org/80392 - () http://osvdb.org/80392 -
References () http://osvdb.org/80393 - () http://osvdb.org/80393 -
References () http://osvdb.org/80395 - () http://osvdb.org/80395 -
References () http://osvdb.org/80396 - () http://osvdb.org/80396 -
References () http://osvdb.org/80403 - () http://osvdb.org/80403 -
References () http://osvdb.org/80406 - () http://osvdb.org/80406 -
References () http://osvdb.org/80407 - () http://osvdb.org/80407 -
References () http://osvdb.org/80409 - () http://osvdb.org/80409 -
References () http://www.ieee-security.org/TC/SP2012/program.html - () http://www.ieee-security.org/TC/SP2012/program.html -
References () http://www.mandriva.com/security/advisories?name=MDVSA-2012:094 - () http://www.mandriva.com/security/advisories?name=MDVSA-2012:094 -
References () http://www.securityfocus.com/archive/1/522005 - () http://www.securityfocus.com/archive/1/522005 -
References () http://www.securityfocus.com/bid/52610 - () http://www.securityfocus.com/bid/52610 -
References () https://exchange.xforce.ibmcloud.com/vulnerabilities/74293 - () https://exchange.xforce.ibmcloud.com/vulnerabilities/74293 -

Information

Published : 2012-03-21 10:11

Updated : 2025-04-11 00:51


NVD link : CVE-2012-1457

Mitre link : CVE-2012-1457

CVE.ORG link : CVE-2012-1457


JSON object : View

Products Affected

ikarus

  • ikarus_virus_utilities_t3_command_line_scanner

eset

  • nod32_antivirus

k7computing

  • antivirus

anti-virus

  • vba32

clamav

  • clamav

microsoft

  • security_essentials

bitdefender

  • bitdefender

f-prot

  • f-prot_antivirus

rising-global

  • rising_antivirus

kaspersky

  • kaspersky_anti-virus

symantec

  • endpoint_protection

norman

  • norman_antivirus_\&_antispyware

aladdin

  • esafe

antiy

  • avl_sdk

virusbuster

  • virusbuster

emsisoft

  • anti-malware

trendmicro

  • housecall
  • trend_micro_antivirus

alwil

  • avast_antivirus

gdata-software

  • g_data_antivirus

pc_tools

  • pc_tools_antivirus

mcafee

  • gateway
  • scan_engine

avg

  • avg_anti-virus

avira

  • antivir

jiangmin

  • jiangmin_antivirus

cat

  • quick_heal

authentium

  • command_antivirus
CWE
CWE-264

Permissions, Privileges, and Access Controls