Gzip File Parser Vulnerability in Multiple Antivirus Products
CVE-2012-1461

Currently unrated

Key Information:

Vendor
CVE Published:
21 March 2012

What is CVE-2012-1461?

Certain antivirus products are vulnerable to a file parsing issue within the Gzip file parser, which allows remote attackers to bypass malware detection mechanisms. This flaw can be exploited by crafting a specially formatted .tar.gz file containing multiple compressed streams. As a result, malicious files may evade detection and compromise the security posture of affected systems.

References

EPSS Score

82% chance of being exploited in the next 30 days.

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.