Vulnerability Details CVE-2012-1438
The Microsoft Office file parser in Comodo Antivirus 7425 and Sophos Anti-Virus 4.61.0 allows remote attackers to bypass malware detection via an Office file with a ustar character sequence at a certain location. NOTE: this may later be SPLIT into multiple CVEs if additional information is published showing that the error occurred independently in different Office parser implementations.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.016
EPSS Ranking 80.6%
CVSS Severity
CVSS v2 Score 4.3
References
Products affected by CVE-2012-1438
-
cpe:2.3:a:comodo:comodo_antivirus:7425
-
cpe:2.3:a:sophos:sophos_anti-virus:4.61.0