TI-2012-01242 Aliases CVE-2012-1420 GHSA-cvrw-mvxm-869j

The TAR file parser in Quick Heal (aka Cat QuickHeal) 11.00, Command Antivirus 5.2.11.5…

MEDIUM 64CWE-264Published 2012-03-21 · Updated 2024-08-06

Key facts

Attack vector: Network
Privileges required: None
User interaction: — Not recorded in CVSS 2.0
Attack complexity: Medium
Impact type: Security bypass
Confidentiality · integrity · availability: None · Partial · None
Fix status: No fix listed

Attack profile from CVSS 2.0 · NVD. Fix status from CNA. Impact type from CWE-264.

Summary

The TAR file parser in Quick Heal (aka Cat QuickHeal) 11.00, Command Antivirus 5.2.11.5, F-Prot Antivirus 4.6.2.117, Fortinet Antivirus 4.2.254.0, K7 AntiVirus 9.77.3565, Kaspersky Anti-Virus 7.0.0.125, Antimalware Engine 1.1.6402.0 in Microsoft Security Essentials 2.0, NOD32 Antivirus 5795, Norman Antivirus 6.06.12, Panda Antivirus 10.0.2.7, and Rising Antivirus 22.83.00.03 allows remote attackers to bypass malware detection via a POSIX TAR file with an initial \7fELF character sequence. NOTE: this may later be SPLIT into multiple CVEs if additional information is published showing that the error occurred independently in different TAR parser implementations.

Why it matters now

EPSS 0.96857 99th percentileScored 2026-11-07

Fix No fix listed No fixed version in the sources yet

SSVC decision points

Not available: CISA has not published SSVC decision points for this record.

Affected products

Vendor	Product	Affected versions	Fixed in	Status	Source
—	—	all versions	—	No fix listed	CNA

— Vendor— Affected all versions Fixed in — No fix listed CNA

CPE configurations NVD · 11

CPE	Versions	Role	Vendor
cpe:2.3:a:authentium:command_antivirus:5.2.11.5:::::::*	5.2.11.5	Vulnerable	Authentium
cpe:2.3:a:cat:quick_heal:11.00:::::::*	11.00	Vulnerable	Cat
cpe:2.3:a:eset:nod32_antivirus:5795:::::::*	5795	Vulnerable	ESET, spol. s r.o.
cpe:2.3:a:f-prot:f-prot_antivirus:4.6.2.117:::::::*	4.6.2.117	Vulnerable	F-prot
cpe:2.3:a:fortinet:fortinet_antivirus:4.2.254.0:::::::*	4.2.254.0	Vulnerable	Fortinet
cpe:2.3:a:k7computing:antivirus:9.77.3565:::::::*	9.77.3565	Vulnerable	K7computing
cpe:2.3:a:kaspersky:kaspersky_anti-virus:7.0.0.125:::::::*	7.0.0.125	Vulnerable	Kaspersky
cpe:2.3:a:microsoft:security_essentials:2.0:::::::*	2.0	Vulnerable	Microsoft
cpe:2.3:a:norman:norman_antivirus_\&_antispyware:6.06.12:::::::*	6.06.12	Vulnerable	Norman
cpe:2.3:a:pandasecurity:panda_antivirus:10.0.2.7:::::::*	10.0.2.7	Vulnerable	Pandasecurity

cpe:2.3:a:authentium:command_antivirus:5.2.11.5:*:*:*:*:*:*:* Versions 5.2.11.5 Vulnerable ·Authentium
cpe:2.3:a:cat:quick_heal:11.00:*:*:*:*:*:*:* Versions 11.00 Vulnerable ·Cat
cpe:2.3:a:eset:nod32_antivirus:5795:*:*:*:*:*:*:* Versions 5795 Vulnerable ·ESET, spol. s r.o.
cpe:2.3:a:f-prot:f-prot_antivirus:4.6.2.117:*:*:*:*:*:*:* Versions 4.6.2.117 Vulnerable ·F-prot
cpe:2.3:a:fortinet:fortinet_antivirus:4.2.254.0:*:*:*:*:*:*:* Versions 4.2.254.0 Vulnerable ·Fortinet
cpe:2.3:a:k7computing:antivirus:9.77.3565:*:*:*:*:*:*:* Versions 9.77.3565 Vulnerable ·K7computing
cpe:2.3:a:kaspersky:kaspersky_anti-virus:7.0.0.125:*:*:*:*:*:*:* Versions 7.0.0.125 Vulnerable ·Kaspersky
cpe:2.3:a:microsoft:security_essentials:2.0:*:*:*:*:*:*:* Versions 2.0 Vulnerable ·Microsoft
cpe:2.3:a:norman:norman_antivirus_\&_antispyware:6.06.12:*:*:*:*:*:*:* Versions 6.06.12 Vulnerable ·Norman
cpe:2.3:a:pandasecurity:panda_antivirus:10.0.2.7:*:*:*:*:*:*:* Versions 10.0.2.7 Vulnerable ·Pandasecurity

Show 1 more CPE

CPE	Versions	Role	Vendor
cpe:2.3:a:rising-global:rising_antivirus:22.83.00.03:::::::*	22.83.00.03	Vulnerable	Rising-global

cpe:2.3:a:rising-global:rising_antivirus:22.83.00.03:*:*:*:*:*:*:* Versions 22.83.00.03 Vulnerable ·Rising-global

Remediation

No fixed version listed by the sources yet.

Timeline

2026-10-02 Threatist record created from CVE-2012-1420
2026-10-03 Alias added: GHSA-cvrw-mvxm-869j
2026-11-05 Priority changed: HIGH → MEDIUM

References

Other 5

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences