Vulnerability in Cat Quick_heal
CVE-2012-1419
The TAR file parser in ClamAV 0.96.4 and Quick Heal (aka Cat QuickHeal) 11.00 allows remote attackers to bypass malware detection via a POSIX TAR file with an initial [aliases] character sequence. NOTE: this may later be SPLIT into multipl…
EPSS: 0.008 (74.5th percentile) — read the EPSS interpretation.
Affected products
- Cat Quick_heal — versions 11.00
- Clamav — versions 0.96.4
- N/a — versions n/a
Weakness classification (CWE)
Public proof-of-concept exploits
References
- 20120319 Evasion attacks expoliting file-parsing vulnerabilities in antivirus products (mailing-list, x_refsource_BUGTRAQ)
- 52572 (vdb-entry, x_refsource_BID)
- 80409 (x_refsource_OSVDB, vdb-entry)
- cve@mitre.org (x_refsource_MISC)
Frequently asked questions
- What is CVE-2012-1419?
- CVE-2012-1419 is a vulnerability in Cat Quick_heal, classified under CWE-264. Published 2012-03-21.
- Is CVE-2012-1419 known to be exploited?
- 1 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.