CVE-2012-1421

medium · 4.3

The TAR file parser in Quick Heal (aka Cat QuickHeal) 11.00, Norman Antivirus 6.06.12, Rising Antivirus 22.83.00.03, and AVEngine 20101.3.0.103 in Symantec Endpoint Protection 11 allows remote attackers to bypass malware detection via a POSIX TAR file with an initial MSCF character sequence. NOTE: this may later be SPLIT into multiple CVEs if additional information is published showing that the error occurred independently in different TAR parser implementations.

4.3

CVSS

89.2%

EPSS (exploit prob.)

100th

EPSS percentile

2012-03-21

Published

AV:N/AC:M/Au:N/C:N/I:P/A:N

Weaknesses

CWE-264

Affected products

Vendor	Product	Affected versions
cat	quick_heal	11.00
norman	norman_antivirus_&_antispyware	6.06.12
rising-global	rising_antivirus	22.83.00.03
symantec	endpoint_protection	11.0

Check a specific version with /api/v1/cve/match.

References

http://osvdb.org/80409
http://www.ieee-security.org/TC/SP2012/program.html
http://www.securityfocus.com/archive/1/522005
http://osvdb.org/80409
http://www.ieee-security.org/TC/SP2012/program.html
http://www.securityfocus.com/archive/1/522005

Query this programmatically:

curl https://evil-db.io/api/v1/cve/CVE-2012-1421