CVE-2012-1448

published 2012-03-21

CVE-2012-1448: The CAB file parser in Quick Heal (aka Cat QuickHeal) 11.00, Trend Micro AntiVirus 9.120.0.1004, Ikarus Virus Utilities T3 Command Line Scanner 1.1.97.0, Trend…

Priority P3 39 medium 4.3 CVSS 2.0

AV N AC M Au N C N I P A N

The CAB file parser in Quick Heal (aka Cat QuickHeal) 11.00, Trend Micro AntiVirus 9.120.0.1004, Ikarus Virus Utilities T3 Command Line Scanner 1.1.97.0, Trend Micro HouseCall 9.120.0.1004, and Emsisoft Anti-Malware 5.1.0.1 allows remote attackers to bypass malware detection via a CAB file with a modified cbCabinet field. NOTE: this may later be SPLIT into multiple CVEs if additional information is published showing that the error occurred independently in different CAB parser implementations.

Affected

5 ranges

Vendor	Product	Version range	Fixed in
cat	quick_heal	—	—
emsisoft	anti-malware	—	—
ikarus	ikarus_virus_utilities_t3_command_line_scanner	—	—
trendmicro	housecall	—	—
trendmicro	trend_micro_antivirus	—	—

Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.

CWE-264