CVE-2012-1419
Dashboard / Vulnerabilities / CVE-2012-1419
CVE-2012-1419
Published: 21 Mar 2012Last Modified: 10 Apr 2026
Summary:
Details: The TAR file parser in ClamAV 0.96.4 and Quick Heal (aka Cat QuickHeal) 11.00 allows remote attackers to bypass malware detection via a POSIX TAR file with an initial [aliases] character sequence. NOTE: this may later be SPLIT into multiple CVEs if additional information is published showing that the error occurred independently in different TAR parser implementations.
References: http://osvdb.org/80409, http://www.ieee-security.org/TC/SP2012/program.html, http://www.securityfocus.com/archive/1/522005, http://www.securityfocus.com/bid/52572
Affected packages
Common Vulnerability Scoring System
Attack Vector
Network
Adjacent
Local
Physical
Privileges Required
None
Low
High
User Interaction
None
Required
Scope
Unchanged
Changed
Confidentiality
None
Low
High
Integrity
None
Low
High
Availability
None
Low
High
