ByteOS Network

Vulnerability Details :

CVE-2012-1457

Assigner-mitre

Assigner Org ID-8254265b-2729-46b6-b9e3-3dfca2d5bfca

Published At-21 Mar, 2012 | 10:00

Updated At-06 Aug, 2024 | 19:01

The TAR file parser in Avira AntiVir 7.11.1.163, Antiy Labs AVL SDK 2.0.3.7, avast! Antivirus 4.8.1351.0 and 5.0.677.0, AVG Anti-Virus 10.0.0.1190, Bitdefender 7.2, Quick Heal (aka Cat QuickHeal) 11.00, ClamAV 0.96.4, Command Antivirus 5.2.11.5, Emsisoft Anti-Malware 5.1.0.1, eSafe 7.0.17.0, F-Prot Antivirus 4.6.2.117, G Data AntiVirus 21, Ikarus Virus Utilities T3 Command Line Scanner 1.1.97.0, Jiangmin Antivirus 13.0.900, K7 AntiVirus 9.77.3565, Kaspersky Anti-Virus 7.0.0.125, McAfee Anti-Virus Scanning Engine 5.400.0.1158, McAfee Gateway (formerly Webwasher) 2010.1C, Antimalware Engine 1.1.6402.0 in Microsoft Security Essentials 2.0, NOD32 Antivirus 5795, Norman Antivirus 6.06.12, PC Tools AntiVirus 7.0.3.5, Rising Antivirus 22.83.00.03, AVEngine 20101.3.0.103 in Symantec Endpoint Protection 11, Trend Micro AntiVirus 9.120.0.1004, Trend Micro HouseCall 9.120.0.1004, VBA32 3.12.14.2, and VirusBuster 13.6.151.0 allows remote attackers to bypass malware detection via a TAR archive entry with a length field that exceeds the total TAR file size. NOTE: this may later be SPLIT into multiple CVEs if additional information is published showing that the error occurred independently in different TAR parser implementations.

EPSS History

Score

Latest Score

N/A

Percentile

Latest Percentile

N/A

▼Common Vulnerabilities and Exposures (CVE)

cve.org

Assigner:mitre

Assigner Org ID:8254265b-2729-46b6-b9e3-3dfca2d5bfca

Published At:21 Mar, 2012 | 10:00

Updated At:06 Aug, 2024 | 19:01

▼CVE Numbering Authority (CNA)

Affected Products

Vendor

n/a

Product

n/a

Versions

Affected

Problem Types

Type	CWE ID	Description
text	N/A	n/a

Type: text

CWE ID: N/A

Description: n/a

References

Hyperlink	Resource
http://lists.opensuse.org/opensuse-security-announce/2012-07/msg00002.html	vendor-advisory x_refsource_SUSE
http://osvdb.org/80406	vdb-entry x_refsource_OSVDB
http://osvdb.org/80393	vdb-entry x_refsource_OSVDB
http://www.securityfocus.com/archive/1/522005	mailing-list x_refsource_BUGTRAQ
http://osvdb.org/80403	vdb-entry x_refsource_OSVDB
http://osvdb.org/80389	vdb-entry x_refsource_OSVDB
http://osvdb.org/80391	vdb-entry x_refsource_OSVDB
http://osvdb.org/80409	vdb-entry x_refsource_OSVDB
http://osvdb.org/80396	vdb-entry x_refsource_OSVDB
http://osvdb.org/80392	vdb-entry x_refsource_OSVDB
http://www.ieee-security.org/TC/SP2012/program.html	x_refsource_MISC
http://www.mandriva.com/security/advisories?name=MDVSA-2012:094	vendor-advisory x_refsource_MANDRIVA
http://www.securityfocus.com/bid/52610	vdb-entry x_refsource_BID
http://osvdb.org/80407	vdb-entry x_refsource_OSVDB
http://osvdb.org/80395	vdb-entry x_refsource_OSVDB
https://exchange.xforce.ibmcloud.com/vulnerabilities/74293	vdb-entry x_refsource_XF

Hyperlink: http://lists.opensuse.org/opensuse-security-announce/2012-07/msg00002.html

Resource:

vendor-advisory

x_refsource_SUSE

Hyperlink: http://osvdb.org/80406

Resource:

vdb-entry

x_refsource_OSVDB

Hyperlink: http://osvdb.org/80393

Resource:

vdb-entry

x_refsource_OSVDB

Hyperlink: http://www.securityfocus.com/archive/1/522005

Resource:

mailing-list

x_refsource_BUGTRAQ

Hyperlink: http://osvdb.org/80403

Resource:

vdb-entry

x_refsource_OSVDB

Hyperlink: http://osvdb.org/80389

Resource:

vdb-entry

x_refsource_OSVDB

Hyperlink: http://osvdb.org/80391

Resource:

vdb-entry

x_refsource_OSVDB

Hyperlink: http://osvdb.org/80409

Resource:

vdb-entry

x_refsource_OSVDB

Hyperlink: http://osvdb.org/80396

Resource:

vdb-entry

x_refsource_OSVDB

Hyperlink: http://osvdb.org/80392

Resource:

vdb-entry

x_refsource_OSVDB

Hyperlink: http://www.ieee-security.org/TC/SP2012/program.html

Resource:

x_refsource_MISC

Hyperlink: http://www.mandriva.com/security/advisories?name=MDVSA-2012:094

Resource:

vendor-advisory

x_refsource_MANDRIVA

Hyperlink: http://www.securityfocus.com/bid/52610

Resource:

vdb-entry

x_refsource_BID

Hyperlink: http://osvdb.org/80407

Resource:

vdb-entry

x_refsource_OSVDB

Hyperlink: http://osvdb.org/80395

Resource:

vdb-entry

x_refsource_OSVDB

Hyperlink: https://exchange.xforce.ibmcloud.com/vulnerabilities/74293

Resource:

vdb-entry

x_refsource_XF

▼Authorized Data Publishers (ADP)

CVE Program Container

References

Hyperlink	Resource
http://lists.opensuse.org/opensuse-security-announce/2012-07/msg00002.html	vendor-advisory x_refsource_SUSE x_transferred
http://osvdb.org/80406	vdb-entry x_refsource_OSVDB x_transferred
http://osvdb.org/80393	vdb-entry x_refsource_OSVDB x_transferred
http://www.securityfocus.com/archive/1/522005	mailing-list x_refsource_BUGTRAQ x_transferred
http://osvdb.org/80403	vdb-entry x_refsource_OSVDB x_transferred
http://osvdb.org/80389	vdb-entry x_refsource_OSVDB x_transferred
http://osvdb.org/80391	vdb-entry x_refsource_OSVDB x_transferred
http://osvdb.org/80409	vdb-entry x_refsource_OSVDB x_transferred
http://osvdb.org/80396	vdb-entry x_refsource_OSVDB x_transferred
http://osvdb.org/80392	vdb-entry x_refsource_OSVDB x_transferred
http://www.ieee-security.org/TC/SP2012/program.html	x_refsource_MISC x_transferred
http://www.mandriva.com/security/advisories?name=MDVSA-2012:094	vendor-advisory x_refsource_MANDRIVA x_transferred
http://www.securityfocus.com/bid/52610	vdb-entry x_refsource_BID x_transferred
http://osvdb.org/80407	vdb-entry x_refsource_OSVDB x_transferred
http://osvdb.org/80395	vdb-entry x_refsource_OSVDB x_transferred
https://exchange.xforce.ibmcloud.com/vulnerabilities/74293	vdb-entry x_refsource_XF x_transferred

Hyperlink: http://lists.opensuse.org/opensuse-security-announce/2012-07/msg00002.html

Resource:

vendor-advisory

x_refsource_SUSE

x_transferred

Hyperlink: http://osvdb.org/80406

Resource:

vdb-entry

x_refsource_OSVDB

x_transferred

Hyperlink: http://osvdb.org/80393

Resource:

vdb-entry

x_refsource_OSVDB

x_transferred

Hyperlink: http://www.securityfocus.com/archive/1/522005

Resource:

mailing-list

x_refsource_BUGTRAQ

x_transferred

Hyperlink: http://osvdb.org/80403

Resource:

vdb-entry

x_refsource_OSVDB

x_transferred

Hyperlink: http://osvdb.org/80389

Resource:

vdb-entry

x_refsource_OSVDB

x_transferred

Hyperlink: http://osvdb.org/80391

Resource:

vdb-entry

x_refsource_OSVDB

x_transferred

Hyperlink: http://osvdb.org/80409

Resource:

vdb-entry

x_refsource_OSVDB

x_transferred

Hyperlink: http://osvdb.org/80396

Resource:

vdb-entry

x_refsource_OSVDB

x_transferred

Hyperlink: http://osvdb.org/80392

Resource:

vdb-entry

x_refsource_OSVDB

x_transferred

Hyperlink: http://www.ieee-security.org/TC/SP2012/program.html

Resource:

x_refsource_MISC

x_transferred

Hyperlink: http://www.mandriva.com/security/advisories?name=MDVSA-2012:094

Resource:

vendor-advisory

x_refsource_MANDRIVA

x_transferred

Hyperlink: http://www.securityfocus.com/bid/52610

Resource:

vdb-entry

x_refsource_BID

x_transferred

Hyperlink: http://osvdb.org/80407

Resource:

vdb-entry

x_refsource_OSVDB

x_transferred

Hyperlink: http://osvdb.org/80395

Resource:

vdb-entry

x_refsource_OSVDB

x_transferred

Hyperlink: https://exchange.xforce.ibmcloud.com/vulnerabilities/74293

Resource:

vdb-entry

x_refsource_XF

x_transferred

▼National Vulnerability Database (NVD)

nvd.nist.gov

Source:cve@mitre.org

Published At:21 Mar, 2012 | 10:11

Updated At:11 Apr, 2025 | 00:51

Date Added	Due Date	Vulnerability Name	Required Action
	N/A

Metrics

Type	Version	Base score	Base severity	Vector
Primary	2.0	4.3	MEDIUM	AV:N/AC:M/Au:N/C:N/I:P/A:N

Type: Primary

Version: 2.0

Base score: 4.3

Base severity: MEDIUM

Vector:

AV:N/AC:M/Au:N/C:N/I:P/A:N

CPE Matches

aladdin>>esafe>>7.0.17.0

cpe:2.3:a:aladdin:esafe:7.0.17.0:*:*:*:*:*:*:*

alwil>>avast_antivirus>>4.8.1351.0

cpe:2.3:a:alwil:avast_antivirus:4.8.1351.0:*:*:*:*:*:*:*

alwil>>avast_antivirus>>5.0.677.0

cpe:2.3:a:alwil:avast_antivirus:5.0.677.0:*:*:*:*:*:*:*

anti-virus>>vba32>>3.12.14.2

cpe:2.3:a:anti-virus:vba32:3.12.14.2:*:*:*:*:*:*:*

antiy>>avl_sdk>>2.0.3.7

cpe:2.3:a:antiy:avl_sdk:2.0.3.7:*:*:*:*:*:*:*

authentium>>command_antivirus>>5.2.11.5

cpe:2.3:a:authentium:command_antivirus:5.2.11.5:*:*:*:*:*:*:*

avg>>avg_anti-virus>>10.0.0.1190

cpe:2.3:a:avg:avg_anti-virus:10.0.0.1190:*:*:*:*:*:*:*

avira>>antivir>>7.11.1.163

cpe:2.3:a:avira:antivir:7.11.1.163:*:*:*:*:*:*:*

Bitdefender

>>bitdefender>>7.2

cpe:2.3:a:bitdefender:bitdefender:7.2:*:*:*:*:*:*:*

cat>>quick_heal>>11.00

cpe:2.3:a:cat:quick_heal:11.00:*:*:*:*:*:*:*

ClamAV

>>clamav>>0.96.4

cpe:2.3:a:clamav:clamav:0.96.4:*:*:*:*:*:*:*

emsisoft>>anti-malware>>5.1.0.1

cpe:2.3:a:emsisoft:anti-malware:5.1.0.1:*:*:*:*:*:*:*

ESET, spol. s r. o.

>>nod32_antivirus>>5795

cpe:2.3:a:eset:nod32_antivirus:5795:*:*:*:*:*:*:*

f-prot>>f-prot_antivirus>>4.6.2.117

cpe:2.3:a:f-prot:f-prot_antivirus:4.6.2.117:*:*:*:*:*:*:*

gdata-software>>g_data_antivirus>>21

cpe:2.3:a:gdata-software:g_data_antivirus:21:*:*:*:*:*:*:*

ikarus>>ikarus_virus_utilities_t3_command_line_scanner>>1.1.97.0

cpe:2.3:a:ikarus:ikarus_virus_utilities_t3_command_line_scanner:1.1.97.0:*:*:*:*:*:*:*

jiangmin>>jiangmin_antivirus>>13.0.900

cpe:2.3:a:jiangmin:jiangmin_antivirus:13.0.900:*:*:*:*:*:*:*

k7computing>>antivirus>>9.77.3565

cpe:2.3:a:k7computing:antivirus:9.77.3565:*:*:*:*:*:*:*

Kaspersky Lab

>>kaspersky_anti-virus>>7.0.0.125

cpe:2.3:a:kaspersky:kaspersky_anti-virus:7.0.0.125:*:*:*:*:*:*:*

McAfee, LLC

>>gateway>>2010.1c

cpe:2.3:a:mcafee:gateway:2010.1c:*:*:*:*:*:*:*

McAfee, LLC

>>scan_engine>>5.400.0.1158

cpe:2.3:a:mcafee:scan_engine:5.400.0.1158:*:*:*:*:*:*:*

Microsoft Corporation

>>security_essentials>>2.0

cpe:2.3:a:microsoft:security_essentials:2.0:*:*:*:*:*:*:*

norman>>norman_antivirus_\&_antispyware>>6.06.12

cpe:2.3:a:norman:norman_antivirus_\&_antispyware:6.06.12:*:*:*:*:*:*:*

pc_tools>>pc_tools_antivirus>>7.0.3.5

cpe:2.3:a:pc_tools:pc_tools_antivirus:7.0.3.5:*:*:*:*:*:*:*

rising-global>>rising_antivirus>>22.83.00.03

cpe:2.3:a:rising-global:rising_antivirus:22.83.00.03:*:*:*:*:*:*:*

Symantec Corporation

>>endpoint_protection>>11.0

cpe:2.3:a:symantec:endpoint_protection:11.0:*:*:*:*:*:*:*

Trend Micro Incorporated

>>housecall>>9.120.0.1004

cpe:2.3:a:trendmicro:housecall:9.120.0.1004:*:*:*:*:*:*:*

Trend Micro Incorporated

>>trend_micro_antivirus>>9.120.0.1004

cpe:2.3:a:trendmicro:trend_micro_antivirus:9.120.0.1004:*:*:*:*:*:*:*

virusbuster>>virusbuster>>13.6.151.0

cpe:2.3:a:virusbuster:virusbuster:13.6.151.0:*:*:*:*:*:*:*

Weaknesses

CWE ID	Type	Source
CWE-264	Primary	nvd@nist.gov

CWE ID: CWE-264

Type: Primary

Source: nvd@nist.gov

References

Hyperlink	Source	Resource
http://lists.opensuse.org/opensuse-security-announce/2012-07/msg00002.html	cve@mitre.org	N/A
http://osvdb.org/80389	cve@mitre.org	N/A
http://osvdb.org/80391	cve@mitre.org	N/A
http://osvdb.org/80392	cve@mitre.org	N/A
http://osvdb.org/80393	cve@mitre.org	N/A
http://osvdb.org/80395	cve@mitre.org	N/A
http://osvdb.org/80396	cve@mitre.org	N/A
http://osvdb.org/80403	cve@mitre.org	N/A
http://osvdb.org/80406	cve@mitre.org	N/A
http://osvdb.org/80407	cve@mitre.org	N/A
http://osvdb.org/80409	cve@mitre.org	N/A
http://www.ieee-security.org/TC/SP2012/program.html	cve@mitre.org	N/A
http://www.mandriva.com/security/advisories?name=MDVSA-2012:094	cve@mitre.org	N/A
http://www.securityfocus.com/archive/1/522005	cve@mitre.org	N/A
http://www.securityfocus.com/bid/52610	cve@mitre.org	N/A
https://exchange.xforce.ibmcloud.com/vulnerabilities/74293	cve@mitre.org	N/A
http://lists.opensuse.org/opensuse-security-announce/2012-07/msg00002.html	af854a3a-2127-422b-91ae-364da2661108	N/A
http://osvdb.org/80389	af854a3a-2127-422b-91ae-364da2661108	N/A
http://osvdb.org/80391	af854a3a-2127-422b-91ae-364da2661108	N/A
http://osvdb.org/80392	af854a3a-2127-422b-91ae-364da2661108	N/A
http://osvdb.org/80393	af854a3a-2127-422b-91ae-364da2661108	N/A
http://osvdb.org/80395	af854a3a-2127-422b-91ae-364da2661108	N/A
http://osvdb.org/80396	af854a3a-2127-422b-91ae-364da2661108	N/A
http://osvdb.org/80403	af854a3a-2127-422b-91ae-364da2661108	N/A
http://osvdb.org/80406	af854a3a-2127-422b-91ae-364da2661108	N/A
http://osvdb.org/80407	af854a3a-2127-422b-91ae-364da2661108	N/A
http://osvdb.org/80409	af854a3a-2127-422b-91ae-364da2661108	N/A
http://www.ieee-security.org/TC/SP2012/program.html	af854a3a-2127-422b-91ae-364da2661108	N/A
http://www.mandriva.com/security/advisories?name=MDVSA-2012:094	af854a3a-2127-422b-91ae-364da2661108	N/A
http://www.securityfocus.com/archive/1/522005	af854a3a-2127-422b-91ae-364da2661108	N/A
http://www.securityfocus.com/bid/52610	af854a3a-2127-422b-91ae-364da2661108	N/A
https://exchange.xforce.ibmcloud.com/vulnerabilities/74293	af854a3a-2127-422b-91ae-364da2661108	N/A