Skip to content
OpenAdvisories
Unscored CVE-2012-1419 EUVD-2012-1444GHSA-f477-w5xf-pqg9

The TAR file parser in ClamAV 0.96.4 and Quick Heal (aka Cat QuickHeal) 11.00 allows remote attackers to bypass malware detection via a POS…

Published Mar 21, 2012 · Updated Aug 6, 2024 · Assigned by mitre

Description

The TAR file parser in ClamAV 0.96.4 and Quick Heal (aka Cat QuickHeal) 11.00 allows remote attackers to bypass malware detection via a POSIX TAR file with an initial [aliases] character sequence. NOTE: this may later be SPLIT into multiple CVEs if additional information is published showing that the error occurred independently in different TAR parser implementations.

Fixed in Linux distributions

Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.

ReleasePackageFixed inAdvisory
Debian 14 clamav 0.97.5+dfsg-1 —
Debian 13 clamav 0.97.5+dfsg-1 —
Debian 12 clamav 0.97.5+dfsg-1 —

References