CVE-2012-1443
Estado: ModificadaMedia (4.3)—
The RAR file parser in ClamAV 0.96.4, Rising Antivirus 22.83.00.03, Quick Heal (aka Cat QuickHeal) 11.00, G Data AntiVirus 21, AVEngine 20101.3.0.103 in Symantec Endpoint Protection 11, Command Antivirus 5.2.11.5, Ikarus Virus Utilities T3 Command Line Scanner 1.1.97.0, Emsisoft Anti-Malware 5.1.0.1, PC Tools AntiVirus 7.0.3.5, F-Prot Antivirus 4.6.2.117, VirusBuster 13.6.151.0, Fortinet Antivirus 4.2.254.0, Antiy Labs AVL SDK 2.0.3.7, K7 AntiVirus 9.77.3565, Trend Micro HouseCall 9.120.0.1004, Kaspersky Anti-Virus 7.0.0.125, Jiangmin Antivirus 13.0.900, Antimalware Engine 1.1.6402.0 in Microsoft Security Essentials 2.0, Sophos Anti-Virus 4.61.0, NOD32 Antivirus 5795, Avira AntiVir 7.11.1.163, Norman Antivirus 6.06.12, McAfee Anti-Virus Scanning Engine 5.400.0.1158, Panda Antivirus 10.0.2.7, McAfee Gateway (formerly Webwasher) 2010.1C, Trend Micro AntiVirus 9.120.0.1004, Comodo Antivirus 7424, Bitdefender 7.2, eSafe 7.0.17.0, F-Secure Anti-Virus 9.0.16160.0, nProtect Anti-Virus 2011-01-17.01, AhnLab V3 Internet Security 2011.01.18.00, AVG Anti-Virus 10.0.0.1190, avast!
Leer descripción completaMostrar menos
Antivirus 4.8.1351.0 and 5.0.677.0, and VBA32 3.12.14.2 allows user-assisted remote attackers to bypass malware detection via a RAR file with an initial MZ character sequence. NOTE: this may later be SPLIT into multiple CVEs if additional information is published showing that the error occurred independently in different RAR parser implementations.
CVSS
- Versión: 2.0
- Vector: AV:N/AC:M/Au:N/C:N/I:P/A:N
- Puntuación base: 4.3
Probabilidad de explotación (EPSS)
- Probabilidad de explotación en los próximos 30 días: 100%
- Percentil entre todas las CVEs puntuadas: 100
- Fecha de la puntuación: 29/9/2026
EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).
Tecnologías afectadas (35)
Ahnlab — V3 Internet SecurityAladdin — EsafeAlwil — Avast AntivirusAnti-virus — Vba32Antiy — AVL SDKAuthentium — Command AntivirusAVG — AVG Anti-virusAvira — AntivirBitdefender — BitdefenderCAT — Quick HealClamav — ClamavComodo — Comodo AntivirusEmsisoft — Anti-malwareEset — Nod32 AntivirusF-prot — F-prot AntivirusF-secure — F-secure Anti-virusFortinet — Fortinet AntivirusGdata-software — G Data AntivirusIkarus — Ikarus Virus Utilities T3 Command Line ScannerJiangmin — Jiangmin AntivirusK7computing — AntivirusKaspersky — Kaspersky Anti-virusMcafee — GatewayMcafee — Scan EngineMicrosoft — Security EssentialsNorman — Norman Antivirus & AntispywareNprotect — Nprotect AntivirusPandasecurity — Panda AntivirusPC Tools — PC Tools AntivirusRising-global — Rising AntivirusSophos — Sophos Anti-virusSymantec — Endpoint ProtectionTrendmicro — HousecallTrendmicro — Trend Micro AntivirusVirusbuster — Virusbuster
CWE
- CWE-264
Referencias
- http://osvdb.org/80454
- http://osvdb.org/80455
- http://osvdb.org/80456
- http://osvdb.org/80457
- http://osvdb.org/80458
- http://osvdb.org/80459
- http://osvdb.org/80460
- http://osvdb.org/80461
- http://osvdb.org/80467
- http://osvdb.org/80468
- http://osvdb.org/80469
- http://osvdb.org/80470
- http://osvdb.org/80471
- http://osvdb.org/80472
- http://www.ieee-security.org/TC/SP2012/program.html
- http://www.securityfocus.com/archive/1/522005
- http://www.securityfocus.com/bid/52612
- http://osvdb.org/80454
- http://osvdb.org/80455
- http://osvdb.org/80456
- http://osvdb.org/80457
- http://osvdb.org/80458
- http://osvdb.org/80459
- http://osvdb.org/80460
- http://osvdb.org/80461
- http://osvdb.org/80467
- http://osvdb.org/80468
- http://osvdb.org/80469
- http://osvdb.org/80470
- http://osvdb.org/80471
- http://osvdb.org/80472
- http://www.ieee-security.org/TC/SP2012/program.html
- http://www.securityfocus.com/archive/1/522005
- http://www.securityfocus.com/bid/52612
JSON original (NVD)
Mostrar
{
"id": "CVE-2012-1443",
"cveTags": [],
"metrics": {
"cvssMetricV2": [
{
"type": "Primary",
"source": "nvd@nist.gov",
"cvssData": {
"version": "2.0",
"baseScore": 4.3,
"accessVector": "NETWORK",
"vectorString": "AV:N/AC:M/Au:N/C:N/I:P/A:N",
"authentication": "NONE",
"integrityImpact": "PARTIAL",
"accessComplexity": "MEDIUM",
"availabilityImpact": "NONE",
"confidentialityImpact": "NONE"
},
"acInsufInfo": false,
"impactScore": 2.9,
"baseSeverity": "MEDIUM",
"obtainAllPrivilege": false,
"exploitabilityScore": 8.6,
"obtainUserPrivilege": false,
"obtainOtherPrivilege": false,
"userInteractionRequired": false
}
]
},
"affected": [
{
"source": "cve@mitre.org",
"affectedData": [
{
"vendor": "n/a",
"product": "n/a",
"versions": [
{
"status": "affected",
"version": "n/a"
}
]
}
]
}
],
"published": "2012-03-21T10:11:48.083",
"references": [
{
"url": "http://osvdb.org/80454",
"source": "cve@mitre.org"
},
{
"url": "http://osvdb.org/80455",
"source": "cve@mitre.org"
},
{
"url": "http://osvdb.org/80456",
"source": "cve@mitre.org"
},
{
"url": "http://osvdb.org/80457",
"source": "cve@mitre.org"
},
{
"url": "http://osvdb.org/80458",
"source": "cve@mitre.org"
},
{
"url": "http://osvdb.org/80459",
"source": "cve@mitre.org"
},
{
"url": "http://osvdb.org/80460",
"source": "cve@mitre.org"
},
{
"url": "http://osvdb.org/80461",
"source": "cve@mitre.org"
},
{
"url": "http://osvdb.org/80467",
"source": "cve@mitre.org"
},
{
"url": "http://osvdb.org/80468",
"source": "cve@mitre.org"
},
{
"url": "http://osvdb.org/80469",
"source": "cve@mitre.org"
},
{
"url": "http://osvdb.org/80470",
"source": "cve@mitre.org"
},
{
"url": "http://osvdb.org/80471",
"source": "cve@mitre.org"
},
{
"url": "http://osvdb.org/80472",
"source": "cve@mitre.org"
},
{
"url": "http://www.ieee-security.org/TC/SP2012/program.html",
"source": "cve@mitre.org"
},
{
"url": "http://www.securityfocus.com/archive/1/522005",
"source": "cve@mitre.org"
},
{
"url": "http://www.securityfocus.com/bid/52612",
"source": "cve@mitre.org"
},
{
"url": "http://osvdb.org/80454",
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "http://osvdb.org/80455",
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "http://osvdb.org/80456",
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "http://osvdb.org/80457",
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "http://osvdb.org/80458",
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "http://osvdb.org/80459",
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "http://osvdb.org/80460",
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "http://osvdb.org/80461",
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "http://osvdb.org/80467",
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "http://osvdb.org/80468",
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "http://osvdb.org/80469",
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "http://osvdb.org/80470",
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "http://osvdb.org/80471",
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "http://osvdb.org/80472",
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "http://www.ieee-security.org/TC/SP2012/program.html",
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "http://www.securityfocus.com/archive/1/522005",
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "http://www.securityfocus.com/bid/52612",
"source": "af854a3a-2127-422b-91ae-364da2661108"
}
],
"vulnStatus": "Modified",
"weaknesses": [
{
"type": "Primary",
"source": "nvd@nist.gov",
"description": [
{
"lang": "en",
"value": "CWE-264"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "The RAR file parser in ClamAV 0.96.4, Rising Antivirus 22.83.00.03, Quick Heal (aka Cat QuickHeal) 11.00, G Data AntiVirus 21, AVEngine 20101.3.0.103 in Symantec Endpoint Protection 11, Command Antivirus 5.2.11.5, Ikarus Virus Utilities T3 Command Line Scanner 1.1.97.0, Emsisoft Anti-Malware 5.1.0.1, PC Tools AntiVirus 7.0.3.5, F-Prot Antivirus 4.6.2.117, VirusBuster 13.6.151.0, Fortinet Antivirus 4.2.254.0, Antiy Labs AVL SDK 2.0.3.7, K7 AntiVirus 9.77.3565, Trend Micro HouseCall 9.120.0.1004, Kaspersky Anti-Virus 7.0.0.125, Jiangmin Antivirus 13.0.900, Antimalware Engine 1.1.6402.0 in Microsoft Security Essentials 2.0, Sophos Anti-Virus 4.61.0, NOD32 Antivirus 5795, Avira AntiVir 7.11.1.163, Norman Antivirus 6.06.12, McAfee Anti-Virus Scanning Engine 5.400.0.1158, Panda Antivirus 10.0.2.7, McAfee Gateway (formerly Webwasher) 2010.1C, Trend Micro AntiVirus 9.120.0.1004, Comodo Antivirus 7424, Bitdefender 7.2, eSafe 7.0.17.0, F-Secure Anti-Virus 9.0.16160.0, nProtect Anti-Virus 2011-01-17.01, AhnLab V3 Internet Security 2011.01.18.00, AVG Anti-Virus 10.0.0.1190, avast! Antivirus 4.8.1351.0 and 5.0.677.0, and VBA32 3.12.14.2 allows user-assisted remote attackers to bypass malware detection via a RAR file with an initial MZ character sequence. NOTE: this may later be SPLIT into multiple CVEs if additional information is published showing that the error occurred independently in different RAR parser implementations."
},
{
"lang": "es",
"value": "El analizador de archivos RAR en ClamAV versión 0.96.4, Rising Antivirus versión 22.83.00.03, Quick Heal (también se conoce como Cat QuickHeal) versión 11.00, G Data AntiVirus versión 21, AVEngine versión 20101.3.0.103 en Symantec Endpoint Protection versión 11, Command Antivirus versión 5.2.11.5, Ikarus Virus Utilities T3 Command Line Scanner versión 1.1.97.0, Emsisoft Anti-Malware versión 5.1.0.1, PC Tools AntiVirus versión 7.0.3.5, F-Prot Antivirus versión 4.6.2.117, VirusBuster versión 13.6.151.0, Fortinet antivirus versión 4.2.254.0, Antiy Labs AVL SDK versión 2.0.3.7, K7 AntiVirus versión 9.77.3565, Trend Micro HouseCall versión 9.120.0.1004, Kaspersky Antivirus versión 7.0.0.125, Jiangmin Antivirus versión 13.0.900, Antimalware Engine versión 1.1.6402.0 en Microsoft Security Essentials versión 2.0, Sophos Anti-Virus versión 4.61.0, NOD32 Antivirus versión 5795, Avira AntiVir versión 7.11.1.163, Norman Antivirus versión 6.06.12, McAfee Anti-Virus Scanning Engine versión 5.400.0.1158, Panda Antivirus versión 10.0.2.7, McAfee Gateway (anteriormente Webwasher) versión 2010.1C, Trend Micro AntiVirus versión 9.120.0.1004, Comodo Antivirus versión 7424, Bitdefender versión 7.2, eSafe versión 7.0.17.0, F-Secure Anti-Virus versión 9.0.16160.0, nProtect Versión antivirus 2011-01-17.01, AhnLab V3 Internet Security versión 2011.01.18.00, AVG Anti-Virus versión 10.0.0.1190, avast! antivirus versiones 4.8.1351.0 y 5.0.677.0, y VBA32 versión 3.12.14.2, permite a los atacantes remotos asistidos por el usuario omitir la detección de malware por medio de un archivo RAR con una inicial Secuencia de caracteres MZ. NOTA: esto puede ser más tarde SPLIT en varios CVE si se publica información adicional que muestra que el error se produjo de manera independiente en diferentes implementaciones de analizador RAR."
}
],
"lastModified": "2026-06-16T23:39:32.407",
"configurations": [
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:a:ahnlab:v3_internet_security:2011.01.18.00:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "0B91745E-EA83-4C70-BF2D-45A3678FA157"
},
{
"criteria": "cpe:2.3:a:aladdin:esafe:7.0.17.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "5C6590DF-9164-4A76-ADEE-9110C5E3588E"
},
{
"criteria": "cpe:2.3:a:alwil:avast_antivirus:4.8.1351.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "5A3A2FBE-3113-4CCB-8FCF-54CBD78FDF52"
},
{
"criteria": "cpe:2.3:a:alwil:avast_antivirus:5.0.677.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "7877C5C9-C4CA-406F-A61A-EAFBA846A20D"
},
{
"criteria": "cpe:2.3:a:anti-virus:vba32:3.12.14.2:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "2A0325DA-A137-41E0-BD5E-B892F2166749"
},
{
"criteria": "cpe:2.3:a:antiy:avl_sdk:2.0.3.7:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "38855431-9C17-41FE-8325-A3304DECAC92"
},
{
"criteria": "cpe:2.3:a:authentium:command_antivirus:5.2.11.5:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "192DFD98-11AA-4E7A-A1CB-53FC06FEB20F"
},
{
"criteria": "cpe:2.3:a:avg:avg_anti-virus:10.0.0.1190:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "4E62090C-AF41-4032-B9F7-78FEBDB4AAE1"
},
{
"criteria": "cpe:2.3:a:avira:antivir:7.11.1.163:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "62B656B8-A7FB-4451-8A32-CB7AB74165F0"
},
{
"criteria": "cpe:2.3:a:bitdefender:bitdefender:7.2:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "24D7D7FA-20E9-4560-ABC6-154CD918E307"
},
{
"criteria": "cpe:2.3:a:cat:quick_heal:11.00:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "343D3F40-E028-4AEE-82A4-0A17C1D1ED13"
},
{
"criteria": "cpe:2.3:a:clamav:clamav:0.96.4:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "953C363B-AD5B-4C53-AAF0-AB6BA4040D74"
},
{
"criteria": "cpe:2.3:a:comodo:comodo_antivirus:7424:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "803A9A92-A984-43A8-8D27-C9A6FDB19A9D"
},
{
"criteria": "cpe:2.3:a:emsisoft:anti-malware:5.1.0.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "488ED4D6-0A32-43D5-840C-F76919C41C45"
},
{
"criteria": "cpe:2.3:a:eset:nod32_antivirus:5795:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "673B999A-11D2-4AFF-9930-0C06E8BBAA7F"
},
{
"criteria": "cpe:2.3:a:f-prot:f-prot_antivirus:4.6.2.117:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "961708EB-3124-4147-A36D-BAD9241D0C88"
},
{
"criteria": "cpe:2.3:a:f-secure:f-secure_anti-virus:9.0.16160.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "BB884937-53F0-4BB5-AA8F-1CCDCD1221D9"
},
{
"criteria": "cpe:2.3:a:fortinet:fortinet_antivirus:4.2.254.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "1C36D1BA-DB17-4FE0-8D6E-BA5649AE3BF0"
},
{
"criteria": "cpe:2.3:a:gdata-software:g_data_antivirus:21:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "DA047323-54B7-460B-9AA0-88C3C4183218"
},
{
"criteria": "cpe:2.3:a:ikarus:ikarus_virus_utilities_t3_command_line_scanner:1.1.97.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "1759C4A5-67D1-4722-954A-883694E57FAB"
},
{
"criteria": "cpe:2.3:a:jiangmin:jiangmin_antivirus:13.0.900:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "620DC756-B821-413C-A824-43C221E573AA"
},
{
"criteria": "cpe:2.3:a:k7computing:antivirus:9.77.3565:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "B27BD224-CB70-43D2-8B0D-9F229A646B82"
},
{
"criteria": "cpe:2.3:a:kaspersky:kaspersky_anti-virus:7.0.0.125:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "FD9BCB3B-0FE8-4716-ABC2-1DB89D330F56"
},
{
"criteria": "cpe:2.3:a:mcafee:gateway:2010.1c:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "18FC30B1-4FB3-4891-93FE-63A93E686EB3"
},
{
"criteria": "cpe:2.3:a:mcafee:scan_engine:5.400.0.1158:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "0BCE1228-61BE-4C10-898A-B8BDC5A71156"
},
{
"criteria": "cpe:2.3:a:microsoft:security_essentials:2.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "7C382AA8-5E99-4669-9825-F5BBEEC12907"
},
{
"criteria": "cpe:2.3:a:norman:norman_antivirus_\\&_antispyware:6.06.12:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "81D01633-1000-425D-9026-59C50734956A"
},
{
"criteria": "cpe:2.3:a:nprotect:nprotect_antivirus:2011-01-17.01:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "D386C31F-6114-4A15-B0D5-15686D7EF8B8"
},
{
"criteria": "cpe:2.3:a:pandasecurity:panda_antivirus:10.0.2.7:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "D95F8C32-D238-493F-A28D-8A588E8ADD13"
},
{
"criteria": "cpe:2.3:a:pc_tools:pc_tools_antivirus:7.0.3.5:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "410EEFDA-CFE6-4DDE-B661-BB01009B0E60"
},
{
"criteria": "cpe:2.3:a:rising-global:rising_antivirus:22.83.00.03:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "EF8ADA91-4042-4E1B-9F14-78023F24B137"
},
{
"criteria": "cpe:2.3:a:sophos:sophos_anti-virus:4.61.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "0912E21E-1EEB-4ADD-958F-F8AEBBF7C5E6"
},
{
"criteria": "cpe:2.3:a:symantec:endpoint_protection:11.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "E269D396-3A70-4C4B-9D79-CBBA75C280D8"
},
{
"criteria": "cpe:2.3:a:trendmicro:housecall:9.120.0.1004:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "B3C3D7B7-3DD1-417E-9488-A3B0F28F75E1"
},
{
"criteria": "cpe:2.3:a:trendmicro:trend_micro_antivirus:9.120.0.1004:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "72379F97-0BCA-425A-92AE-9F336866FD07"
},
{
"criteria": "cpe:2.3:a:virusbuster:virusbuster:13.6.151.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "32C656A2-AAAC-494A-A981-A83144070857"
}
],
"operator": "OR"
}
]
}
],
"sourceIdentifier": "cve@mitre.org"
}