Free and open · new CVEs checked every 20 minutesStatusRSSOpen dataContact

CVE-2012-1425: The TAR file parser in Avira AntiVir 7.11.1.163, Antiy Labs AVL SDK 2.0.3.7, Quick Heal (aka Cat QuickHeal) 11

40
This week
MEDIUM 4.3DOWNGRADEDOWNGRADEDOWNGRADE

CVE-2012-1425 is a medium-severity flaw (CVSS 4.3) affecting avl sdk, antivir, quick heal. Below: why it ranks where it does, which versions are affected, what to do, and the exact commands.

The TAR file parser in Avira AntiVir 7.11.1.163, Antiy Labs AVL SDK 2.0.3.7, Quick Heal (aka Cat QuickHeal) 11.00, Emsisoft Anti-Malware 5.1.0.1, Fortinet Antivirus 4.2.254.0, Ikarus Virus Utilities T3 Command Line Scanner 1.1.97.0, Jiangmin Antivirus 13.0.900, Kaspersky Anti-Virus 7.0.0.125, McAfee Anti-Virus Scanning Engine 5.400.0.1158, McAfee Gateway (formerly Webwasher) 2010.1C, NOD32 Antivirus 5795, Norman Antivirus 6.06.12, PC Tools AntiVi

Why this priority

  • EPSS top 1%: very likely to be exploited

No fix is published yet: follow the downgrade or mitigation steps.

Risk facts

CVSS score4.3 (Medium)
EPSS exploit chance93.2% (top 1%)
CISA exploited listNo
WeaknessCWE-264
Published2012-03-21
Last modified2026-06-16
Publisher (CNA): MITRE · Vendor: antiy · avira · cat · emsisoft · eset · fortinet

Share: LinkedIn · X · Reddit

Last updated 2026-06-16 · Sources: CVE Program, NVD, CISA KEV, EPSS and vendor advisories · How we score

Am I affected?

Timeline

antiy avl sdk DOWNGRADE
Affected: 2.0.3.7
Fixed in: no fixed release known
Safe to downgrade to: a release before 2.0.3.7
1. Check installed version
apt-cache policy avl-sdk || rpm -q avl-sdk || avl-sdk --version
2. No fixed release: DOWNGRADE to a release before 2.0.3.7 (Debian / Ubuntu)
apt-cache madison avl-sdk sudo apt install avl-sdk=<VERSION_BEFORE_2.0.3.7> sudo apt-mark hold avl-sdk
2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)
dnf --showduplicates list avl-sdk sudo dnf downgrade avl-sdk-<VERSION_BEFORE_2.0.3.7> sudo dnf versionlock add avl-sdk
Downgrade risk
Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host.
After downgrade
Restart the service, and keep the package held until a fixed release ships.
avira antivir DOWNGRADE
Affected: 7.11.1.163
Fixed in: no fixed release known
Safe to downgrade to: a release before 7.11.1.163
1. Check installed version
apt-cache policy antivir || rpm -q antivir || antivir --version
2. No fixed release: DOWNGRADE to a release before 7.11.1.163 (Debian / Ubuntu)
apt-cache madison antivir sudo apt install antivir=<VERSION_BEFORE_7.11.1.163> sudo apt-mark hold antivir
2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)
dnf --showduplicates list antivir sudo dnf downgrade antivir-<VERSION_BEFORE_7.11.1.163> sudo dnf versionlock add antivir
Downgrade risk
Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host.
After downgrade
Restart the service, and keep the package held until a fixed release ships.
cat quick heal DOWNGRADE
Affected: 11.00
Fixed in: no fixed release known
Safe to downgrade to: a release before 11.00
1. Check installed version
apt-cache policy quick-heal || rpm -q quick-heal || quick-heal --version
2. No fixed release: DOWNGRADE to a release before 11.00 (Debian / Ubuntu)
apt-cache madison quick-heal sudo apt install quick-heal=<VERSION_BEFORE_11.00> sudo apt-mark hold quick-heal
2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)
dnf --showduplicates list quick-heal sudo dnf downgrade quick-heal-<VERSION_BEFORE_11.00> sudo dnf versionlock add quick-heal
Downgrade risk
Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host.
After downgrade
Restart the service, and keep the package held until a fixed release ships.
emsisoft anti-malware DOWNGRADE
Affected: 5.1.0.1
Fixed in: no fixed release known
Safe to downgrade to: a release before 5.1.0.1
1. Check installed version
apt-cache policy anti-malware || rpm -q anti-malware || anti-malware --version
2. No fixed release: DOWNGRADE to a release before 5.1.0.1 (Debian / Ubuntu)
apt-cache madison anti-malware sudo apt install anti-malware=<VERSION_BEFORE_5.1.0.1> sudo apt-mark hold anti-malware
2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)
dnf --showduplicates list anti-malware sudo dnf downgrade anti-malware-<VERSION_BEFORE_5.1.0.1> sudo dnf versionlock add anti-malware
Downgrade risk
Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host.
After downgrade
Restart the service, and keep the package held until a fixed release ships.
eset nod32 antivirus DOWNGRADE
Affected: 5795
Fixed in: no fixed release known
Safe to downgrade to: a release before 5795
1. Check installed version
apt-cache policy nod32-antivirus || rpm -q nod32-antivirus || nod32-antivirus --version
2. No fixed release: DOWNGRADE to a release before 5795 (Debian / Ubuntu)
apt-cache madison nod32-antivirus sudo apt install nod32-antivirus=<VERSION_BEFORE_5795> sudo apt-mark hold nod32-antivirus
2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)
dnf --showduplicates list nod32-antivirus sudo dnf downgrade nod32-antivirus-<VERSION_BEFORE_5795> sudo dnf versionlock add nod32-antivirus
Downgrade risk
Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host.
After downgrade
Restart the service, and keep the package held until a fixed release ships.
fortinet fortinet antivirus DOWNGRADE
Affected: 4.2.254.0
Fixed in: no fixed release known
Safe to downgrade to: a release before 4.2.254.0
1. Check installed version
apt-cache policy fortinet-antivirus || rpm -q fortinet-antivirus || fortinet-antivirus --version
2. No fixed release: DOWNGRADE to a release before 4.2.254.0 (Debian / Ubuntu)
apt-cache madison fortinet-antivirus sudo apt install fortinet-antivirus=<VERSION_BEFORE_4.2.254.0> sudo apt-mark hold fortinet-antivirus
2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)
dnf --showduplicates list fortinet-antivirus sudo dnf downgrade fortinet-antivirus-<VERSION_BEFORE_4.2.254.0> sudo dnf versionlock add fortinet-antivirus
Downgrade risk
Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host.
After downgrade
Restart the service, and keep the package held until a fixed release ships.
Verify at the official source NVD · CVE Program · Report a problem with this page
Scores and fixes here are computed automatically from those and other public sources. Confirm with the vendor advisory before changing production systems.

Quick answers

How do I fix CVE-2012-1425?

avl sdk: downgrade or apply the listed mitigation; antivir: downgrade or apply the listed mitigation; quick heal: downgrade or apply the listed mitigation. Exact commands for each OS are on this page.

Is CVE-2012-1425 being exploited?

CVE-2012-1425 is not on the CISA Known Exploited Vulnerabilities list at the time of the last update. Check again, as this can change.

What does CVE-2012-1425 affect?

CVE-2012-1425 affects avl sdk, antivir, quick heal. Severity is medium (CVSS 4.3). The TAR file parser in Avira AntiVir 7.11.1.163, Antiy Labs AVL SDK 2.0.3.7, Quick Heal (aka Cat QuickHeal) 11.00, Emsisoft Anti-Malware 5.1.0.1, Fortinet Antivirus 4.2.254.0, Ikarus Virus Utilities T3 Command Line Scanner 1.1.97.0, Jiangmi

How urgent is CVE-2012-1425?

Priority 40/100. EPSS top 1%: very likely to be exploited

Software pages

Fortinet vulnerabilities · McAfee vulnerabilities · Kaspersky vulnerabilities · ESET vulnerabilities

Related CVEs

References

← Back to latest CVEs

Get the weekly exploited-CVE digest by emailThe CVEs being attacked this week and how to fix them. No spam, unsubscribe any time.