CVE-2012-1419
EPSS 0.81%
Description
The TAR file parser in ClamAV 0.96.4 and Quick Heal (aka Cat QuickHeal) 11.00 allows remote attackers to bypass malware detection via a POSIX TAR file with an initial [aliases] character sequence. NOTE: this may later be SPLIT into multiple CVEs if additional information is published showing that the error occurred independently in different TAR parser implementations.
How to fix CVE-2012-1419
To remediate CVE-2012-1419, upgrade the affected package to a fixed version below.
- Debian/clamav—upgrade to 0.97.5+dfsg-1 or later
Is CVE-2012-1419 being exploited?
Low — EPSS is 0.8%, meaning exploitation activity has not been observed at scale.
Affected packages (1)
- from 0, < 0.97.5+dfsg-1