CVE-2012-1458
NoneCVSS
—
EPSS
73.7%
Published
Mar 21, 2012
CISA due date
—
The record
The Microsoft CHM file parser in ClamAV 0.96.4 and Sophos Anti-Virus 4.61.0 allows remote attackers to bypass malware detection via a crafted reset interval in the LZXC header of a CHM file. NOTE: this may later be SPLIT into multiple CVEs if additional information is published showing that the error occurred independently in different CHM parser implementations.
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|---|---|---|
| Debian:10 | clamav | 0 | 0.97.5+dfsg-1 |
| Debian:11 | clamav | 0 | 0.97.5+dfsg-1 |
| Debian:12 | clamav | 0 | 0.97.5+dfsg-1 |
| Debian:13 | clamav | 0 | 0.97.5+dfsg-1 |
| openSUSE:Tumbleweed | clamav | 0 | 0.99.2-4.1 |
Related vulnerabilities
- CVE-2023-20197 A vulnerability in the filesystem image parser for Hierarchical File System Plus (HFS+)… Also affects clamav
- CVE-2023-20052 On Feb 15, 2023, the following vulnerability in the ClamAV scanning library was… Also affects clamav
- CVE-2023-20032 On Feb 15, 2023, the following vulnerability in the ClamAV scanning library was… Also affects clamav
- CVE-2017-11423 The cabd_read_string function in mspack/cabd.c in libmspack 0.5alpha, as used in ClamAV… Also affects clamav
- CVE-2015-2305 Integer overflow in the regcomp implementation in the Henry Spencer BSD regex library… Also affects clamav
- CVE-2012-1457 The TAR file parser in Avira AntiVir 7.11.1.163, Antiy Labs AVL SDK 2.0.3.7, avast! Also affects clamav
- CVE-2012-1459 The TAR file parser in AhnLab V3 Internet Security 2011.01.18.00, Avira AntiVir… Also affects clamav
- CVE-2012-1419 The TAR file parser in ClamAV 0.96.4 and Quick Heal (aka Cat QuickHeal) 11.00 allows… Also affects clamav