PT-2012-3283 · Sophos+2 · Sophos Anti-Virus+2

Published 2012-03-21 · Updated 2024-06-15 · CVE-2012-1458

Positive Technologies (AI Summary)

CVSS v2.0

4.3

Medium

Base vector

AV:N/AC:M/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions ClamAV version 0.96.4 Sophos Anti-Virus version 4.61.0

Description The issue allows remote attackers to bypass malware detection through a crafted reset interval in the LZXC header of a CHM file.

Recommendations For ClamAV version 0.96.4, update to a newer version that contains a fix for this issue. For Sophos Anti-Virus version 4.61.0, update to a newer version that contains a fix for this issue.

Fix

Weakness Enumeration

CWE-264

Related Identifiers

CVE-2012-1458

OPENSUSE-SU-2024:10571-1

Affected Products

Clamav

Sophos Anti-Virus

Suse

References · 29

• http://lists.opensuse.org/opensuse-security-announce/2012-07/msg00002.html · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2012-1458 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2012-1458 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2012-1458 · Vendor Advisory
• http://mandriva.com/security/advisories?name=MDVSA-2012:094 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2012-1458 · Security Note
• https://osv.dev/vulnerability/openSUSE-SU-2024:10571-1 · Vendor Advisory
• https://suse.com/security/cve/CVE-2015-2221 · Note
• https://suse.com/security/cve/CVE-2015-2222 · Note
• https://suse.com/security/cve/CVE-2012-1459 · Note
• http://securityfocus.com/bid/52611 · Note
• https://suse.com/security/cve/CVE-2015-2668 · Note
• https://suse.com/security/cve/CVE-2015-2305 · Note
• https://suse.com/security/cve/CVE-2010-0405 · Note
• https://suse.com/security/cve/CVE-2011-2721 · Note