CVE-2012-1419

描述

The TAR file parser in ClamAV 0.96.4 and Quick Heal (aka Cat QuickHeal) 11.00 allows remote attackers to bypass malware detection via a POSIX TAR file with an initial [aliases] character sequence. NOTE: this may later be SPLIT into multiple CVEs if additional information is published showing that the error occurred independently in different TAR parser implementations.

如何修補 CVE-2012-1419

要修補 CVE-2012-1419,請將受影響套件升級到下列已修補版本。

• Debian/clamav—升級至 0.97.5+dfsg-1 或更新版本

CVE-2012-1419 正在被利用嗎?

中等 — EPSS 為 41.4%,可持續追蹤但非最高優先。

受影響套件(1)

• from 0, < 0.97.5+dfsg-1

參考連結(1)

• ADVISORYsecurity-tracker.debian.org/tracker/CVE-2012-1419