CVE-2012-1457 [Medium] | Security Bypass in Esafe

The TAR file parser in Avira AntiVir 7.11.1.163, Antiy Labs AVL SDK 2.0.3.7, avast! Antivirus 4.8.1351.0 and 5.0.677.0, AVG Anti-Virus 10.0.0.1190, Bitdefender 7.2, Quick Heal (aka Cat QuickHeal) 11.00, ClamAV 0.96.4, Command Antivirus 5.2.11.5, Emsisoft Anti-Malware 5.1.0.1, eSafe 7.0.17.0, F-Prot Antivirus 4.6.2.117, G Data AntiVirus 21, Ikarus Virus Utilities T3 Command Line Scanner 1.1.97.0, Jiangmin Antivirus 13.0.900, K7 AntiVirus 9.77.3565, Kaspersky Anti-Virus 7.0.0.125, McAfee Anti-Virus Scanning Engine 5.400.0.1158, McAfee Gateway (formerly Webwasher) 2010.1C, Antimalware Engine 1.1.6402.0 in Microsoft Security Essentials 2.0, NOD32 Antivirus 5795, Norman Antivirus 6.06.12, PC Tools AntiVirus 7.0.3.5, Rising Antivirus 22.83.00.03, AVEngine 20101.3.0.103 in Symantec Endpoint Protection 11, Trend Micro AntiVirus 9.120.0.1004, Trend Micro HouseCall 9.120.0.1004, VBA32 3.12.14.2, and VirusBuster 13.6.151.0 allows remote attackers to bypass malware detection via a TAR archive entry with a length field that exceeds the total TAR file size. NOTE: this may later be SPLIT into multiple CVEs if additional information is published showing that the error occurred independently in different TAR parser implementations.

#	Date	Old EPSS score	New EPSS score	Delta (New - Old)
1	2026-02-20	64.88%	50.85%	-14.03%
2	2025-12-01	59.21%	64.88%	+5.67%
3	2025-09-20	—	59.21%	—

Date

Old EPSS score

New EPSS score

Delta (New - Old)

2026-02-20

64.88%

50.85%

-14.03%

2025-12-01

59.21%

64.88%

+5.67%

2025-09-20

—

59.21%

—

Base score	Version	Severity	Vector	Exploitability	Impact	Score source
4.3	2.0	MEDIUM	`AV:N/AC:M/Au:N/C:N/I:P/A:N` Click to expand Access vector (AV:N) Can be exploited remotely over network reachability. Access complexity (AC:M) Exploitation needs some favorable conditions, but not exceptional ones. Authentication (AU:N) No authentication is required. Confidentiality impact (C:N) No confidentiality impact. Integrity impact (I:P) Partial integrity impact. Availability impact (A:N) No availability impact.	8.6	2.9	[email protected]

Base score

Version

Severity

Vector

Exploitability

Impact

Score source

4.3

2.0

MEDIUM

AV:N/AC:M/Au:N/C:N/I:P/A:N Click to expand

Access vector (AV:N): Can be exploited remotely over network reachability.
Access complexity (AC:M): Exploitation needs some favorable conditions, but not exceptional ones.
Authentication (AU:N): No authentication is required.
Confidentiality impact (C:N): No confidentiality impact.
Integrity impact (I:P): Partial integrity impact.
Availability impact (A:N): No availability impact.

8.6

2.9

[email protected]

OS Trackers for CVE-2012-1457

vendor	priority	summary	link
`debian`	low	CVE-2012-1457 low priority: Debian including 1 source packages (clamav), 5 status rows across 5 suites (bookworm, bullseye, forky, sid, trixie): resolved 5.	https://security-tracker.debian.org/tracker/CVE-2012-1457
`suse`	medium	CVE-2012-1457 severity moderate: SUSE including 25 source package names (clamav-0.100.0-1.17, clamav-0.100.2-33.18.1, …), 33 product×package rows across 21 product lines (SUSE Linux Enterprise Desktop 12, SUSE Linux Enterprise Desktop 12 SP1, … (21 product lines)): Fixed 33.	https://www.suse.com/security/cve/CVE-2012-1457/
`ubuntu`	medium	CVE-2012-1457 medium priority: Ubuntu including 1 source packages (clamav), 7 status rows across 7 suites (hardy, lucid, maverick, natty, oneiric, precise, upstream): released 5, ignored 2.	https://ubuntu.com/security/CVE-2012-1457

Affected software / configurations for CVE-2012-1457

Vendor	Product	Version	Raw CPE
aladdin	esafe	7.0.17.0	cpe:2.3:a:aladdin:esafe:7.0.17.0:::::::*
alwil	avast_antivirus	4.8.1351.0	cpe:2.3:a:alwil:avast_antivirus:4.8.1351.0:::::::*
alwil	avast_antivirus	5.0.677.0	cpe:2.3:a:alwil:avast_antivirus:5.0.677.0:::::::*
anti-virus	vba32	3.12.14.2	cpe:2.3:a:anti-virus:vba32:3.12.14.2:::::::*
antiy	avl_sdk	2.0.3.7	cpe:2.3:a:antiy:avl_sdk:2.0.3.7:::::::*
authentium	command_antivirus	5.2.11.5	cpe:2.3:a:authentium:command_antivirus:5.2.11.5:::::::*
avg	avg_anti-virus	10.0.0.1190	cpe:2.3:a:avg:avg_anti-virus:10.0.0.1190:::::::*
avira	antivir	7.11.1.163	cpe:2.3:a:avira:antivir:7.11.1.163:::::::*
bitdefender	bitdefender	7.2	cpe:2.3:a:bitdefender:bitdefender:7.2:::::::*
cat	quick_heal	11.00	cpe:2.3:a:cat:quick_heal:11.00:::::::*
clamav	clamav	0.96.4	cpe:2.3:a:clamav:clamav:0.96.4:::::::*
emsisoft	anti-malware	5.1.0.1	cpe:2.3:a:emsisoft:anti-malware:5.1.0.1:::::::*
eset	nod32_antivirus	5795	cpe:2.3:a:eset:nod32_antivirus:5795:::::::*
f-prot	f-prot_antivirus	4.6.2.117	cpe:2.3:a:f-prot:f-prot_antivirus:4.6.2.117:::::::*
gdata-software	g_data_antivirus	21	cpe:2.3:a:gdata-software:g_data_antivirus:21:::::::*
ikarus	ikarus_virus_utilities_t3_command_line_scanner	1.1.97.0	cpe:2.3:a:ikarus:ikarus_virus_utilities_t3_command_line_scanner:1.1.97.0:::::::*
jiangmin	jiangmin_antivirus	13.0.900	cpe:2.3:a:jiangmin:jiangmin_antivirus:13.0.900:::::::*
k7computing	antivirus	9.77.3565	cpe:2.3:a:k7computing:antivirus:9.77.3565:::::::*
kaspersky	kaspersky_anti-virus	7.0.0.125	cpe:2.3:a:kaspersky:kaspersky_anti-virus:7.0.0.125:::::::*
mcafee	gateway	2010.1c	cpe:2.3:a:mcafee:gateway:2010.1c:::::::*
mcafee	scan_engine	5.400.0.1158	cpe:2.3:a:mcafee:scan_engine:5.400.0.1158:::::::*
microsoft	security_essentials	2.0	cpe:2.3:a:microsoft:security_essentials:2.0:::::::*
norman	norman_antivirus_\&_antispyware	6.06.12	cpe:2.3:a:norman:norman_antivirus_\&_antispyware:6.06.12:::::::*
pc_tools	pc_tools_antivirus	7.0.3.5	cpe:2.3:a:pc_tools:pc_tools_antivirus:7.0.3.5:::::::*
rising-global	rising_antivirus	22.83.00.03	cpe:2.3:a:rising-global:rising_antivirus:22.83.00.03:::::::*
symantec	endpoint_protection	11.0	cpe:2.3:a:symantec:endpoint_protection:11.0:::::::*
trendmicro	housecall	9.120.0.1004	cpe:2.3:a:trendmicro:housecall:9.120.0.1004:::::::*
trendmicro	trend_micro_antivirus	9.120.0.1004	cpe:2.3:a:trendmicro:trend_micro_antivirus:9.120.0.1004:::::::*
virusbuster	virusbuster	13.6.151.0	cpe:2.3:a:virusbuster:virusbuster:13.6.151.0:::::::*

References for CVE-2012-1457

URL	Tags
http://lists.opensuse.org/opensuse-security-announce/2012-07/msg00002.html
http://osvdb.org/80389
http://osvdb.org/80391
http://osvdb.org/80392
http://osvdb.org/80393
http://osvdb.org/80395
http://osvdb.org/80396
http://osvdb.org/80403
http://osvdb.org/80406
http://osvdb.org/80407
http://osvdb.org/80409
http://www.ieee-security.org/TC/SP2012/program.html
http://www.mandriva.com/security/advisories?name=MDVSA-2012:094
http://www.securityfocus.com/archive/1/522005
http://www.securityfocus.com/bid/52610
https://exchange.xforce.ibmcloud.com/vulnerabilities/74293

URL

CVE-2012-1457

Exploit prediction scoring system (EPSS) score for CVE-2012-1457

Common vulnerability scoring system (CVSS) metrics for CVE-2012-1457

Weakness enumeration for CVE-2012-1457

OS Trackers for CVE-2012-1457

Affected software / configurations for CVE-2012-1457

References for CVE-2012-1457