CVE-2012-1429
Last modified
CVE-2012-1429 is a vulnerability of currently unknown severity. The ELF file parser in Bitdefender 7.2, Comodo Antivirus 7424, Emsisoft Anti-Malware 5.1.0.1, eSafe 7.0.17.0, F-Secure Anti-Virus 9.0.16160.0, Ikarus Virus Utilities T3 Command Line Scanner 1.1.97.0, McAfee Anti-Virus Scanning Engine 5.400.0.1158, McAfee Gateway (formerly Webwasher) 2010.1C, and nProtect Anti-Virus 2011-01-17.01 allows remote attackers to bypass malware detection via an ELF file with a ustar character sequence at a certain location. NOTE: this may later be SPLIT into multiple CVEs if additional information is published showing that the error occurred independently in different ELF parser implementations.. EPSS estimates a 92.63% chance of exploitation in the next 30 days.
Description
The ELF file parser in Bitdefender 7.2, Comodo Antivirus 7424, Emsisoft Anti-Malware 5.1.0.1, eSafe 7.0.17.0, F-Secure Anti-Virus 9.0.16160.0, Ikarus Virus Utilities T3 Command Line Scanner 1.1.97.0, McAfee Anti-Virus Scanning Engine 5.400.0.1158, McAfee Gateway (formerly Webwasher) 2010.1C, and nProtect Anti-Virus 2011-01-17.01 allows remote attackers to bypass malware detection via an ELF file with a ustar character sequence at a certain location. NOTE: this may later be SPLIT into multiple CVEs if additional information is published showing that the error occurred independently in different ELF parser implementations.
Metrics
Weakness Enumeration
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Aladdin | Esafe | 7.0.17.0 |
| Comodo | Comodo Antivirus | 7424 |
| Emsisoft | Anti-Malware | 5.1.0.1 |
| F-Secure | F-Secure Anti-Virus | 9.0.16160.0 |
| Ikarus | Ikarus Virus Utilities T3 Command Line Scanner | 1.1.97.0 |
| Mcafee | Gateway | 2010.1c |
| Mcafee | Scan Engine | 5.400.0.1158 |
| Nprotect | Nprotect Antivirus | 2011-01-17.01 |
| Softwin | Bitdefender | 7.2 |
References
Timeline
- Published
- Last Modified
- Status
- Modified
Frequently Asked Questions
What is CVE-2012-1429?
How severe is CVE-2012-1429?
How do I fix CVE-2012-1429?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2012
- CVE-2012-1423The TAR file parser in Command Antivirus 5.2.11.5, Emsisoft …
- CVE-2012-1424The TAR file parser in Antiy Labs AVL SDK 2.0.3.7, Quick Hea…
- CVE-2012-1425The TAR file parser in Avira AntiVir 7.11.1.163, Antiy Labs …
- CVE-2012-1426The TAR file parser in Quick Heal (aka Cat QuickHeal) 11.00,…
- CVE-2012-1427The TAR file parser in Quick Heal (aka Cat QuickHeal) 11.00,…
- CVE-2012-1428The TAR file parser in Quick Heal (aka Cat QuickHeal) 11.00,…
- CVE-2012-1430The ELF file parser in Bitdefender 7.2, Comodo Antivirus 742…
- CVE-2012-1431The ELF file parser in Bitdefender 7.2, Command Antivirus 5.…
- CVE-2012-1432The Microsoft EXE file parser in Emsisoft Anti-Malware 5.1.0…
- CVE-2012-1433The Microsoft EXE file parser in AhnLab V3 Internet Security…
- CVE-2012-1434The Microsoft EXE file parser in AhnLab V3 Internet Security…
- CVE-2012-1435The Microsoft EXE file parser in AhnLab V3 Internet Security…
Are you affected by CVE-2012-1429?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST