All vulnerabilities

Servers and applications

CVE-2012-1419

The TAR file parser in ClamAV 0.96.4 and Quick Heal (aka Cat QuickHeal) 11.00 allows remote attackers to bypass malware detection via a POSIX TAR file with an initial [aliases] character sequence. NOTE: this may later be SPLIT into multiple CVEs if additional information is published showing that the error occurred independently in different TAR parser implementations.

Severity
Medium 4.3
Published
21 Mar 2012
Last changed
16 Jun 2026
Added to UpHeron
1 Nov 2026
Exploit chance
39% in the next 30 daysHigher than 98% of CVEs. EPSS by FIRST, 12 Nov 2026
Weakness
CWE-264
Attack
Over the network · No login needed
Attacker can
Change some data
CVSS vector
AV:N/AC:M/Au:N/C:N/I:P/A:N
Sources
NVD

Affected software

SoftwareAffected versions
ClamAVServers and applications · cpe:a:clamav:clamav
  • Version 0.96.4

References

  • NVD https://nvd.nist.gov/vuln/detail/CVE-2012-1419
  • CVE.org https://www.cve.org/CVERecord?id=CVE-2012-1419