What’s Vulnerable › Vulnerabilities

CVE-2012-1438

• Severity: medium (CVSS 4.3 v2.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 14.0% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2012-03-21 · updated 2026-06-16
• Weakness: CWE-264

Description

The Microsoft Office file parser in Comodo Antivirus 7425 and Sophos Anti-Virus 4.61.0 allows remote attackers to bypass malware detection via an Office file with a ustar character sequence at a certain location. NOTE: this may later be SPLIT into multiple CVEs if additional information is published showing that the error occurred independently in different Office parser implementations.

Affected products

• Comodo Antivirus: 7425
• Sophos Anti-Virus: 4.61.0

References

• http://www.ieee-security.org/TC/SP2012/program.html
• http://www.securityfocus.com/archive/1/522005
• http://www.ieee-security.org/TC/SP2012/program.html
• http://www.securityfocus.com/archive/1/522005

Get alerted when CVE-2012-1438 or the next vulnerability affects your stack