CVE-2012-1448

CVE Database · CVE-2012-1448

CVE-2012-1448

· N/AModified

CVSS v3.1

N/A

EPSS

89.01%

Published

Mar 21, 2012

Modified

Apr 28, 2026

Public PoC / Exploit (1)

All weaponized →

TrickestTrickest PoC index

Links to public security research (Exploit-DB, Nuclei, Trickest, GitHub) for defensive use only.

Description

The CAB file parser in Quick Heal (aka Cat QuickHeal) 11.00, Trend Micro AntiVirus 9.120.0.1004, Ikarus Virus Utilities T3 Command Line Scanner 1.1.97.0, Trend Micro HouseCall 9.120.0.1004, and Emsisoft Anti-Malware 5.1.0.1 allows remote attackers to bypass malware detection via a CAB file with a modified cbCabinet field. NOTE: this may later be SPLIT into multiple CVEs if additional information is published showing that the error occurred independently in different CAB parser implementations.

Weaknesses (CWE)

CWE-264

Affected Products (5)

cat · quick_healvulnerable

emsisoft · anti-malwarevulnerable

ikarus · ikarus_virus_utilities_t3_command_line_scannervulnerable

trendmicro · housecallvulnerable

trendmicro · trend_micro_antivirusvulnerable

References (6)

http://www.ieee-security.org/TC/SP2012/program.html

http://www.securityfocus.com/archive/1/522005

http://www.securityfocus.com/bid/52603

http://www.ieee-security.org/TC/SP2012/program.html

http://www.securityfocus.com/archive/1/522005

http://www.securityfocus.com/bid/52603

KEV Catalog EPSS Scores Vendors All CVEs