Search/CVE-2012-1420
● CVE

CVE-2012-1420

Vendork7computing, microsoft, eset, pandasecurity, kasperskyProductantivirus, security essentials, nod32 antivirus, panda antivirus, kaspersky anti-virus, fortinet antivirus, quick heal, f-prot antivirus, command antivirus, rising antivirus, norman antivirus & antispywareDiscoveredMar 21, 2012UpdatedApr 29, 2026

The TAR file parser in Quick Heal (aka Cat QuickHeal) 11.00, Command Antivirus 5.2.11.5, F-Prot Antivirus 4.6.2.117, Fortinet Antivirus 4.2.254.0, K7 AntiVirus 9.77.3565, Kaspersky Anti-Virus 7.0.0.125, Antimalware Engine 1.1.6402.0 in Microsoft Security Essentials 2.0, NOD32 Antivirus 5795, Norman Antivirus 6.06.12, Panda Antivirus 10.0.2.7, and Rising Antivirus 22.83.00.03 allows remote attackers to bypass malware detection via a POSIX TAR file with an initial \7fELF character sequence. NOTE: this may later be SPLIT into multiple CVEs if additional information is published showing that the error occurred independently in different TAR parser implementations.

CVSS v3.1
—
EPSS
97.1%
probability of exploitation in 30 days
CISA KEV
Not listed
no confirmed exploitation reported
News coverage
0
sources referencing this CVE
Related IOCs
0
seen in the same coverage
Connections
12 relationships
Timeline
disclosure → media coverage
Mar 21, 2012
Disclosure — published as a CVE record. · last revised by NVD Apr 29, 2026