Bypass of Malware Detection in ClamAV and Sophos Anti-Virus Products

CVE-2012-1458

What is CVE-2012-1458?

The Microsoft CHM file parser within ClamAV and Sophos Anti-Virus has a security flaw that allows attackers to evade malware detection by crafting a specific reset interval in the LZXC header of a CHM file. This vulnerability can be exploited by an attacker to bypass the security measures designed to detect malicious content in CHM files, potentially exposing users to unrecognized threats.

References