PatchTheCVECVE-2012-1429: The ELF file parser in Bitdefender 7.2, Comodo Antivirus 7424, Emsisoft Anti-Malware 5.1.0.1, eSafe 7.0.17.0,
40
This week
MEDIUM 4.3DOWNGRADEDOWNGRADEDOWNGRADE
CVE-2012-1429 is a medium-severity flaw (CVSS 4.3) affecting esafe, comodo antivirus, anti-malware. Below: why it ranks where it does, which versions are affected, what to do, and the exact commands.
The ELF file parser in Bitdefender 7.2, Comodo Antivirus 7424, Emsisoft Anti-Malware 5.1.0.1, eSafe 7.0.17.0, F-Secure Anti-Virus 9.0.16160.0, Ikarus Virus Utilities T3 Command Line Scanner 1.1.97.0, McAfee Anti-Virus Scanning Engine 5.400.0.1158, McAfee Gateway (formerly Webwasher) 2010.1C, and nProtect Anti-Virus 2011-01-17.01 allows remote attackers to bypass malware detection via an ELF file with a ustar character sequence at a certain locati
Why this priority
- EPSS top 1%: very likely to be exploited
No fix is published yet: follow the downgrade or mitigation steps.
Risk facts
| CVSS score | 4.3 (Medium) |
| EPSS exploit chance | 92.5% (top 1%) |
| CISA exploited list | No |
| Weakness | CWE-264 |
| Published | 2012-03-21 |
| Last modified | 2026-06-16 |
Last updated 2026-06-16 · Sources: CVE Program, NVD, CISA KEV, EPSS and vendor advisories · How we score
Am I affected?
Timeline
- Published CVE record published
- Updated Record last modified
aladdin esafe DOWNGRADE
Affected: 7.0.17.0
Fixed in: no fixed release known
Safe to downgrade to: a release before 7.0.17.0
1. Check installed version
apt-cache policy esafe || rpm -q esafe || esafe --version
2. No fixed release: DOWNGRADE to a release before 7.0.17.0 (Debian / Ubuntu)
apt-cache madison esafe
sudo apt install esafe=<VERSION_BEFORE_7.0.17.0>
sudo apt-mark hold esafe
2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)
dnf --showduplicates list esafe
sudo dnf downgrade esafe-<VERSION_BEFORE_7.0.17.0>
sudo dnf versionlock add esafe
Downgrade risk
Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host.
After downgrade
Restart the service, and keep the package held until a fixed release ships.
comodo comodo antivirus DOWNGRADE
Affected: 7424
Fixed in: no fixed release known
Safe to downgrade to: a release before 7424
1. Check installed version
apt-cache policy comodo-antivirus || rpm -q comodo-antivirus || comodo-antivirus --version
2. No fixed release: DOWNGRADE to a release before 7424 (Debian / Ubuntu)
apt-cache madison comodo-antivirus
sudo apt install comodo-antivirus=<VERSION_BEFORE_7424>
sudo apt-mark hold comodo-antivirus
2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)
dnf --showduplicates list comodo-antivirus
sudo dnf downgrade comodo-antivirus-<VERSION_BEFORE_7424>
sudo dnf versionlock add comodo-antivirus
Downgrade risk
Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host.
After downgrade
Restart the service, and keep the package held until a fixed release ships.
emsisoft anti-malware DOWNGRADE
Affected: 5.1.0.1
Fixed in: no fixed release known
Safe to downgrade to: a release before 5.1.0.1
1. Check installed version
apt-cache policy anti-malware || rpm -q anti-malware || anti-malware --version
2. No fixed release: DOWNGRADE to a release before 5.1.0.1 (Debian / Ubuntu)
apt-cache madison anti-malware
sudo apt install anti-malware=<VERSION_BEFORE_5.1.0.1>
sudo apt-mark hold anti-malware
2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)
dnf --showduplicates list anti-malware
sudo dnf downgrade anti-malware-<VERSION_BEFORE_5.1.0.1>
sudo dnf versionlock add anti-malware
Downgrade risk
Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host.
After downgrade
Restart the service, and keep the package held until a fixed release ships.
f-secure f-secure anti-virus DOWNGRADE
Affected: 9.0.16160.0
Fixed in: no fixed release known
Safe to downgrade to: a release before 9.0.16160.0
1. Check installed version
apt-cache policy f-secure-anti-virus || rpm -q f-secure-anti-virus || f-secure-anti-virus --version
2. No fixed release: DOWNGRADE to a release before 9.0.16160.0 (Debian / Ubuntu)
apt-cache madison f-secure-anti-virus
sudo apt install f-secure-anti-virus=<VERSION_BEFORE_9.0.16160.0>
sudo apt-mark hold f-secure-anti-virus
2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)
dnf --showduplicates list f-secure-anti-virus
sudo dnf downgrade f-secure-anti-virus-<VERSION_BEFORE_9.0.16160.0>
sudo dnf versionlock add f-secure-anti-virus
Downgrade risk
Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host.
After downgrade
Restart the service, and keep the package held until a fixed release ships.
ikarus ikarus virus utilities t3 command line scanner DOWNGRADE
Affected: 1.1.97.0
Fixed in: no fixed release known
Safe to downgrade to: a release before 1.1.97.0
1. Check installed version
apt-cache policy ikarus-virus-utilities-t3-command-line-scanner || rpm -q ikarus-virus-utilities-t3-command-line-scanner || ikarus-virus-utilities-t3-command-line-scanner --version
2. No fixed release: DOWNGRADE to a release before 1.1.97.0 (Debian / Ubuntu)
apt-cache madison ikarus-virus-utilities-t3-command-line-scanner
sudo apt install ikarus-virus-utilities-t3-command-line-scanner=<VERSION_BEFORE_1.1.97.0>
sudo apt-mark hold ikarus-virus-utilities-t3-command-line-scanner
2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)
dnf --showduplicates list ikarus-virus-utilities-t3-command-line-scanner
sudo dnf downgrade ikarus-virus-utilities-t3-command-line-scanner-<VERSION_BEFORE_1.1.97.0>
sudo dnf versionlock add ikarus-virus-utilities-t3-command-line-scanner
Downgrade risk
Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host.
After downgrade
Restart the service, and keep the package held until a fixed release ships.
mcafee gateway DOWNGRADE
Affected: 2010.1c
Fixed in: no fixed release known
Safe to downgrade to: a release before 2010.1c
1. Check installed version
apt-cache policy gateway || rpm -q gateway || gateway --version
2. No fixed release: DOWNGRADE to a release before 2010.1c (Debian / Ubuntu)
apt-cache madison gateway
sudo apt install gateway=<VERSION_BEFORE_2010.1c>
sudo apt-mark hold gateway
2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)
dnf --showduplicates list gateway
sudo dnf downgrade gateway-<VERSION_BEFORE_2010.1c>
sudo dnf versionlock add gateway
Downgrade risk
Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host.
After downgrade
Restart the service, and keep the package held until a fixed release ships.
Verify at the official source NVD · CVE Program · Report a problem with this page
Scores and fixes here are computed automatically from those and other public sources. Confirm with the vendor advisory before changing production systems.
Scores and fixes here are computed automatically from those and other public sources. Confirm with the vendor advisory before changing production systems.
Quick answers
How do I fix CVE-2012-1429?
esafe: downgrade or apply the listed mitigation; comodo antivirus: downgrade or apply the listed mitigation; anti-malware: downgrade or apply the listed mitigation. Exact commands for each OS are on this page.
Is CVE-2012-1429 being exploited?
CVE-2012-1429 is not on the CISA Known Exploited Vulnerabilities list at the time of the last update. Check again, as this can change.
What does CVE-2012-1429 affect?
CVE-2012-1429 affects esafe, comodo antivirus, anti-malware. Severity is medium (CVSS 4.3). The ELF file parser in Bitdefender 7.2, Comodo Antivirus 7424, Emsisoft Anti-Malware 5.1.0.1, eSafe 7.0.17.0, F-Secure Anti-Virus 9.0.16160.0, Ikarus Virus Utilities T3 Command Line Scanner 1.1.97.0, McAfee Anti-Virus Scanning Engine 5.400.
How urgent is CVE-2012-1429?
Priority 40/100. EPSS top 1%: very likely to be exploited
Software pages
Related CVEs
- CVE-2012-1463 MEDIUM 4.3 DOWNGRADE DOWNGRADE The ELF file parser in AhnLab V3 Internet Security 2011.01.18.00, Bitdefender 7.2, Quick Heal (aka Cat QuickHe
- CVE-2012-1462 MEDIUM 4.3 DOWNGRADE DOWNGRADE The ZIP file parser in AhnLab V3 Internet Security 2011.01.18.00, AVG Anti-Virus 10.0.0.1190, Quick Heal (aka
- CVE-2012-1460 MEDIUM 4.3 DOWNGRADE DOWNGRADE The Gzip file parser in Antiy Labs AVL SDK 2.0.3.7, Quick Heal (aka Cat QuickHeal) 11.00, Command Antivirus 5.
- CVE-2012-1457 MEDIUM 4.3 DOWNGRADE DOWNGRADE The TAR file parser in Avira AntiVir 7.11.1.163, Antiy Labs AVL SDK 2.0.3.7, avast! Antivirus 4.8.1351.0 and 5
- CVE-2012-1456 MEDIUM 4.3 DOWNGRADE DOWNGRADE The TAR file parser in AVG Anti-Virus 10.0.0.1190, Quick Heal (aka Cat QuickHeal) 11.00, Comodo Antivirus 7424