CVE-2012-1450
Last modified
CVE-2012-1450 is a vulnerability of currently unknown severity. The CAB file parser in Emsisoft Anti-Malware 5.1.0.1, Sophos Anti-Virus 4.61.0, and Ikarus Virus Utilities T3 Command Line Scanner 1.1.97.0 allows remote attackers to bypass malware detection via a CAB file with a modified reserved3 field. NOTE: this may later be SPLIT into multiple CVEs if additional information is published showing that the error occurred independently in different CAB parser implementations.. EPSS estimates a 73.76% chance of exploitation in the next 30 days.
Description
The CAB file parser in Emsisoft Anti-Malware 5.1.0.1, Sophos Anti-Virus 4.61.0, and Ikarus Virus Utilities T3 Command Line Scanner 1.1.97.0 allows remote attackers to bypass malware detection via a CAB file with a modified reserved3 field. NOTE: this may later be SPLIT into multiple CVEs if additional information is published showing that the error occurred independently in different CAB parser implementations.
Metrics
Weakness Enumeration
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Emsisoft | Anti-Malware | 5.1.0.1 |
| Ikarus | Ikarus Virus Utilities T3 Command Line Scanner | 1.1.97.0 |
| Sophos | Sophos Anti-Virus | 4.61.0 |
References
Timeline
- Published
- Last Modified
- Status
- Modified
Frequently Asked Questions
What is CVE-2012-1450?
How severe is CVE-2012-1450?
How do I fix CVE-2012-1450?
Are you affected by CVE-2012-1450?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST