CVE-2012-1453

CVE-2012-1453 is a medium-severity vulnerability in Antiy Avl Sdk with a CVSS 2.0 base score of 4.3. Its EPSS exploit-prediction score of 98% places it in the 100th percentile, indicating an elevated likelihood of exploitation. The underlying weakness is classified as CWE-264.

Key facts

Description

The CAB file parser in Dr.Web 5.0.2.03300, Trend Micro HouseCall 9.120.0.1004, Kaspersky Anti-Virus 7.0.0.125, Sophos Anti-Virus 4.61.0, Trend Micro AntiVirus 9.120.0.1004, McAfee Gateway (formerly Webwasher) 2010.1C, Emsisoft Anti-Malware 5.1.0.1, CA eTrust Vet Antivirus 36.1.8511, Antiy Labs AVL SDK 2.0.3.7, Antimalware Engine 1.1.6402.0 in Microsoft Security Essentials 2.0, Rising Antivirus 22.83.00.03, Ikarus Virus Utilities T3 Command Line Scanner 1.1.97.0, Fortinet Antivirus 4.2.254.0, and Panda Antivirus 10.0.2.7 allows remote attackers to bypass malware detection via a CAB file with a modified coffFiles field. NOTE: this may later be SPLIT into multiple CVEs if additional information is published showing that the error occurred independently in different CAB parser implementations.

Frequently asked questions

What is CVE-2012-1453?
The CAB file parser in Dr.Web 5.0.2.03300, Trend Micro HouseCall 9.120.0.1004, Kaspersky Anti-Virus 7.0.0.125, Sophos Anti-Virus 4.61.0, Trend Micro AntiVirus 9.120.0.1004, McAfee Gateway (formerly Webwasher) 2010.1C, Emsisoft Anti-Malware 5.1.0.1, CA eTrust Vet Antivirus 36.1.8511, Antiy Labs AVL SDK 2.0.3.7, Antimalware Engine 1.1.6402.0 in Microsoft Security Essentials 2.0, Rising Antivirus 22.83.00.03, Ikarus Virus Utilities T3 Command Line Scanner 1.1.97.0, Fortinet Antivirus 4.2.254.0, and Panda Antivirus 10.0.2.7 allows remote attackers to bypass malware detection via a CAB file with a modified coffFiles field. NOTE: this may later be SPLIT into multiple CVEs if additional information is published showing that the error occurred independently in different CAB parser implementations.
How severe is CVE-2012-1453?
CVE-2012-1453 has a CVSS 2.0 base score of 4.3, rated medium severity.
Is CVE-2012-1453 being actively exploited?
It is not currently listed in CISA's KEV catalog. Its EPSS exploit-prediction score is 98% (100th percentile), an estimate of the probability of exploitation in the next 30 days.
What products are affected by CVE-2012-1453?
CVE-2012-1453 primarily affects Antiy Avl Sdk. In total, 14 product configurations (CPEs) are listed as vulnerable; see the affected-products list for the exact versions.
How do I fix CVE-2012-1453?
Review the linked vendor and NVD advisories for patched versions and mitigations, then upgrade or apply the recommended workaround.
When was CVE-2012-1453 published?
CVE-2012-1453 was published on 2012-03-21 and last updated on 2026-06-16.

References

Affected products (14)

More vulnerabilities in Antiy Avl Sdk

All CVEs affecting Antiy Avl Sdk →

Other CWE-264 (Permissions, Privileges, and Access Controls) vulnerabilities

Browse all CWE-264 (Permissions, Privileges, and Access Controls) vulnerabilities →