CVE-2012-1448
Last modified
CVE-2012-1448 is a vulnerability of currently unknown severity. The CAB file parser in Quick Heal (aka Cat QuickHeal) 11.00, Trend Micro AntiVirus 9.120.0.1004, Ikarus Virus Utilities T3 Command Line Scanner 1.1.97.0, Trend Micro HouseCall 9.120.0.1004, and Emsisoft Anti-Malware 5.1.0.1 allows remote attackers to bypass malware detection via a CAB file with a modified cbCabinet field. NOTE: this may later be SPLIT into multiple CVEs if additional information is published showing that the error occurred independently in different CAB parser implementations.. EPSS estimates a 89.01% chance of exploitation in the next 30 days.
Description
The CAB file parser in Quick Heal (aka Cat QuickHeal) 11.00, Trend Micro AntiVirus 9.120.0.1004, Ikarus Virus Utilities T3 Command Line Scanner 1.1.97.0, Trend Micro HouseCall 9.120.0.1004, and Emsisoft Anti-Malware 5.1.0.1 allows remote attackers to bypass malware detection via a CAB file with a modified cbCabinet field. NOTE: this may later be SPLIT into multiple CVEs if additional information is published showing that the error occurred independently in different CAB parser implementations.
Metrics
Weakness Enumeration
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Cat | Quick Heal | 11.00 |
| Emsisoft | Anti-Malware | 5.1.0.1 |
| Ikarus | Ikarus Virus Utilities T3 Command Line Scanner | 1.1.97.0 |
| Trendmicro | Housecall | 9.120.0.1004 |
| Trendmicro | Trend Micro Antivirus | 9.120.0.1004 |
References
Timeline
- Published
- Last Modified
- Status
- Modified
Frequently Asked Questions
What is CVE-2012-1448?
How severe is CVE-2012-1448?
How do I fix CVE-2012-1448?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2012
- CVE-2012-1442The ELF file parser in Quick Heal (aka Cat QuickHeal) 11.00,…
- CVE-2012-1443The RAR file parser in ClamAV 0.96.4, Rising Antivirus 22.83…
- CVE-2012-1444The ELF file parser in eSafe 7.0.17.0, Prevx 3.0, Fortinet A…
- CVE-2012-1445The ELF file parser in eSafe 7.0.17.0, Rising Antivirus 22.8…
- CVE-2012-1446The ELF file parser in Quick Heal (aka Cat QuickHeal) 11.00,…
- CVE-2012-1447The ELF file parser in Fortinet Antivirus 4.2.254.0, eSafe 7…
- CVE-2012-1449The CAB file parser in NOD32 Antivirus 5795 and Rising Antiv…
- CVE-2012-1450The CAB file parser in Emsisoft Anti-Malware 5.1.0.1, Sophos…
- CVE-2012-1451The CAB file parser in Emsisoft Anti-Malware 5.1.0.1 and Ika…
- CVE-2012-1452The CAB file parser in Emsisoft Anti-Malware 5.1.0.1, Ikarus…
- CVE-2012-1453The CAB file parser in Dr.Web 5.0.2.03300, Trend Micro House…
- CVE-2012-1454The ELF file parser in Dr.Web 5.0.2.03300, eSafe 7.0.17.0, M…
Are you affected by CVE-2012-1448?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST