CVE-2012-1453
The CAB file parser in Dr.Web 5.0.2.03300, Trend Micro HouseCall 9.120.0.1004, Kaspersky Anti-Virus 7.0.0.125, Sophos Anti-Virus 4.61.0, Trend Micro AntiVirus 9.120.0.1004, McAfee Gateway (formerly Webwasher) 2010.1C, Emsisoft Anti-Malware 5.1.0.1, CA eTrust Vet Antivirus 36.1.8511, Antiy Labs AVL SDK 2.0.3.7, Antimalware Engine 1.1.6402.0 in Microsoft Security Essentials 2.0, Rising Antivirus 22.83.00.03, Ikarus Virus Utilities T3 Command Line Scanner 1.1.97.0, Fortinet Antivirus 4.2.254.0, and Panda Antivirus 10.0.2.7 allows remote attackers to bypass malware detection via a CAB file with a modified coffFiles field. NOTE: this may later be SPLIT into multiple CVEs if additional information is published showing that the error occurred independently in different CAB parser implementations.
Key facts
- CVSS score
- 4.3 (v2.0)
- Severity
- MEDIUM
- CVSS vector
AV:N/AC:M/Au:N/C:N/I:P/A:N- Weakness (CWE)
- CWE-264
- EPSS score
- 97.5% (100th percentile)
- In CISA KEV
- No
- In EU EUVD
- Yes (EUVD-2012-1475)
- Published
- March 21, 2012
- NVD last modified
- June 16, 2026
- Status
- Modified
EU Vulnerability Database (EUVD)
This vulnerability is also tracked by ENISA as EUVD-2012-1475 in the EU Vulnerability Database. Last updated in EUVD on August 6, 2024.
View on the EU Vulnerability DatabaseAffected products
- antiy / avl sdk
- ca / etrust vet antivirus
- drweb / dr.web antivirus
- emsisoft / anti-malware
- fortinet / fortinet antivirus
- ikarus / ikarus virus utilities t3 command line scanner
- kaspersky / kaspersky anti-virus
- mcafee / gateway
- microsoft / security essentials
- pandasecurity / panda antivirus
- rising-global / rising antivirus
- sophos / sophos anti-virus
- trendmicro / housecall
- trendmicro / trend micro antivirus
References
- http://osvdb.org/80482
- http://osvdb.org/80483
- http://osvdb.org/80484
- http://osvdb.org/80485
- http://osvdb.org/80486
- http://osvdb.org/80487
- http://osvdb.org/80488
- http://osvdb.org/80489
- http://www.ieee-security.org/TC/SP2012/program.html
- http://www.securityfocus.com/archive/1/522005
- http://www.securityfocus.com/bid/52621
Last updated September 17, 2026 · Source: NVD, CISA KEV, FIRST.org EPSS
Query CVEs from your AI assistant
The CVE/NVD Explorer brain answers CVE questions directly inside Claude, ChatGPT, or any MCP assistant — always up to date, no setup. Add it once and stop pasting advisories into chat.
Add the CVE brain