QwikSec

Security Database

CVE

CWE

Training

CVE-2012-1419

Published: Mar 21, 2012

Modified: Aug 6, 2024

PUBLISHED

Description

The TAR file parser in ClamAV 0.96.4 and Quick Heal (aka Cat QuickHeal) 11.00 allows remote attackers to bypass malware detection via a POSIX TAR file with an initial [aliases] character sequence. NOTE: this may later be SPLIT into multiple CVEs if additional information is published showing that the error occurred independently in different TAR parser implementations.

Vendor	Product	Versions
n/a	n/a	affected `n/a`

References

20120319 Evasion attacks expoliting file-parsing vulnerabilities in antivirus products

mailing-list

x_refsource_BUGTRAQ

vdb-entry

x_refsource_BID

vdb-entry

x_refsource_OSVDB

http://www.ieee-security.org/TC/SP2012/program.html

x_refsource_MISC

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.