CVE-2012-1453 Details
Description
The CAB file parser in Dr.Web 5.0.2.03300, Trend Micro HouseCall 9.120.0.1004, Kaspersky Anti-Virus 7.0.0.125, Sophos Anti-Virus 4.61.0, Trend Micro AntiVirus 9.120.0.1004, McAfee Gateway (formerly Webwasher) 2010.1C, Emsisoft Anti-Malware 5.1.0.1, CA eTrust Vet Antivirus 36.1.8511, Antiy Labs AVL SDK 2.0.3.7, Antimalware Engine 1.1.6402.0 in Microsoft Security Essentials 2.0, Rising Antivirus 22.83.00.03, Ikarus Virus Utilities T3 Command Line Scanner 1.1.97.0, Fortinet Antivirus 4.2.254.0, and Panda Antivirus 10.0.2.7 allows remote attackers to bypass malware detection via a CAB file with a modified coffFiles field. NOTE: this may later be SPLIT into multiple CVEs if additional information is published showing that the error occurred independently in different CAB parser implementations.
Metrics
CVSS 4.0 Severity and Vector Strings:
No CVSS 4.0 data is available for this CVE.
CVSS 3.x Severity and Vector Strings:
No CVSS 3.x data is available for this CVE.
No data available for CVSS Version 2.0 on this CVE.
No SSVC data is available for this CVE.
References to Advisories, Solutions, and Tools
By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.
Weakness Enumeration
| CWE-ID | CWE Name | Source |
|---|---|---|
| CWE-264 | Permissions, Privileges, and Access Controls | [email protected] |
Affected Products
| Product | Versions |
|---|---|
| antiy avl sdk | 2.0.3.7 |
CPE
Remediation
| |
| ca etrust vet antivirus | 36.1.8511 |
CPE
Remediation
| |
| drweb dr.web antivirus | 5.0.2.03300 |
CPE
Remediation
| |
| emsisoft anti-malware | 5.1.0.1 |
CPE
Remediation
| |
| fortinet fortinet antivirus | 4.2.254.0 |
CPE
Remediation
| |
| ikarus ikarus virus utilities t3 command line scanner | 1.1.97.0 |
CPE
Remediation
| |
| kaspersky kaspersky anti-virus | 7.0.0.125 |
CPE
Remediation
| |
| mcafee gateway | 2010.1c |
CPE
Remediation
| |
| microsoft security essentials | 2.0 |
CPE
Remediation
| |
| pandasecurity panda antivirus | 10.0.2.7 |
CPE
Remediation
| |
| rising-global rising antivirus | 22.83.00.03 |
CPE
Remediation
| |
| sophos sophos anti-virus | 4.61.0 |
CPE
Remediation
| |
| trendmicro housecall | 9.120.0.1004 |
CPE
Remediation
| |
| trendmicro trend micro antivirus | 9.120.0.1004 |
CPE
Remediation
| |
Change History
5 change records found show changes
| Date | Action | Recorded By |
|---|---|---|
| Jun 16, 2026 | CVE Modified | [email protected] |
| Apr 29, 2026 | Status Change | [email protected] |
| Nov 21, 2024 | CVE Modified | CVE |
| May 14, 2024 | CVE Modified | [email protected] |
| Mar 21, 2012 | Initial Analysis | [email protected] |